ExchangeSmash

proxylogon प्रॉक्सीलोगॉन श्रृंखला Microsoft Exchange Server - CVE-2021-26855 के लिए मेरा शोषण चलाएँ: शोषण Impacket पैकेज का उपयोग करता है, इसे स्थापित करने के लिए यह चलाएँ: root@kitploit: user@host:$ python3 -m pip install impacket फिर शोषण रिपॉजिटरी को क्लोन करें, और शोषण निर्देशिका में प्रवेश...

CVE-2021-34473

CVE-2021-34473 CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability Reproducing ProxyShell Exploit https://y4y.space/2021/08/12/my-steps-of-reproducing-proxyshell/ This is NOT your Cyberweapon just a experimental PoC...

ProxyLogon

ProxyLogon ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability,...

Microsoft_Exchange_Server_SSRF_CVE-2021-26855

MicrosoftExchangeServerSSRFCVE-2021-26855 zoomeye dork：app:"Microsoft Exchange Server" Using the script MicrosoftExchangeServerSSRFCVE-2021-26855.py written with Seebug toolkit and pocsuite3, to probe data from the past year: 成功率约为：1500 / 5000 = 30%...

ProxyShell

ProxyShell CVE-2021-34473 CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability. This faulty URL normalization lets us access an arbitrary backend URL while running as the Exchange Server machine account. Although this bug is not as powerful as the SSRF in ProxyLogon, and w...

Proxyshell-Scanner

Proxyshell-Scanner nuclei scanner for Proxyshell RCE CVE-2021-34423,CVE-2021-34473,CVE-2021-31207 discovered by orange tsai in Pwn2Own, which affect microsoft exchange server. POC Resource https://blog.orange.tw/2021/08/proxylogon-a-new-attack-surface-on-ms-exchange-part-1.html...

CVE-2018-8581

CVE-2018-8581 This is a lateral movement and privilege escalation vulnerability at the mailbox level Once you have the credentials of an ordinary mailbox account, it allows you to delegate and take over the inboxes of other users including domain administrators This EXP script is an enhanced...

CVE-2021-26855_PoC

CVE-2021-26855PoC I miei primi payload SSRF CVE-2021-26855 su Exchange Server 2019... Payload 1 root@kitploit: curl -i -s -k -X $'GET' -H $'Host: ' -H $'User-Agent: alex666' -H $'Connection: close' -b $'X-AnonResource=true;...

CVE-2021-26855

CVE-2021-26855 CVE-2021-26855, noto anche come Proxylogon, è una vulnerabilità di server-side request forgery SSRF in Exchange che consente a un attaccante di inviare richieste HTTP arbitrarie e autenticarsi come server Exchange. Secondo Orange Tsai, il ricercatore che ha scoperto le vulnerabilit...

HAFNIUM-IOC

HAFNIUM-IOC Hafnium-IOC è un semplice script PowerShell che viene eseguito sui server Exchange per identificare indicatori di compromissione IOC dall'attività di Hafnium rilasciata da Mircosoft il 02-03-2021 https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers/. L...

CVE-2021-26855

CVE-2021-26855-PoC Codice PoC dell'exploit per CVE-2021-26855. Il codice originale è stato sviluppato da https://github.com/GreyOrder. Il repository originale è stato eliminato poco dopo l'aggiunta di funzionalità aggiuntive enumerazione utenti, ecc.. Se hai l'ultima versione, invia una pull...

ProxyShell

ProxyShell Installazione root@kitploit: git clone https://github.com/ktecv2000/ProxyShell cd ProxyShell virtualenv -p $which python3 venv source venv/bin/activate pip3 install pypsrp cp wsman.py venv/lib//site-packages/pypsrp/wsman.py Utilizzo root@kitploit: python3 exploit.py...

exchange-scanner

Scanner do Microsoft Exchange Server Descrição Esta ferramenta verifica vários serviços comuns expostos publicamente num host alvo, a fim de detetar o Microsoft Exchange Server e, se possível, identificar a versão do seu software através de impressão digital. Para tal, utiliza as seguintes...

CVE-2020-0688

CVE-2020-0688 Scanner Questo è un piccolo script sporco per verificare la presenza di server Exchange vulnerabili a CVE-2020-0688 È scritto male ed in PHP. Attenzione: controlla solo se hai installato l'aggiornamento CU attuale. Ciò non significa che hai installato la patch di correzione! Requisi...

NtlmRelayToEWS

ntlmRelayToEWS Autore: Arno0x0x - @Arno0x0x ntlmRelayToEWS è uno strumento per eseguire attacchi di relay NTLM su Exchange Web Services EWS. Avvia un SMBListener sulla porta 445 e un HTTPListener sulla porta 80, in attesa di una connessione in arrivo dalla vittima. Quando la vittima si connette a...

ProxyLogon

ProxyLogon Python3 के लिए ProxyLogonCVE-2021-26855+CVE-2021-27065 Exchange Server RCESSRF-GetWebShell root@kitploit: usage: python ProxyLogon.py --host=exchange.com [email protected] python ProxyLogon.py --host=exchange.com --mails=./mails.txt args: --host: target's address. --mail: exists...

CVE-2022-41040

CVE-2022-41040 CVE-2022-41040 nuclei-Vorlage Unverifiziert! Verwendung root@kitploit: git clone https://github.com/numanturle/CVE-2022-41040 cd CVE-2022-41040 nuclei -u https://target -t owa.yaml root@kitploit: GET...

http-vuln-CVE-2022-41082

LA VERSIONE AGGIORNATA CONSENTE ANCHE IL CONTROLLO HTTPS exchange-vuln-check.nse PER HTTP: nmap -p80 --script exchange-vuln-check.nse PER HTTPS: nmap -p443 --script exchange-vuln-check.nse SALVA I RISULTATI IN UN FILE nmap -p80 --script exchange-vuln-check.nse -oN results.txt...

ruler

Introduction Ruler is a tool that allows you to interact with Exchange servers remotely, through either the MAPI/HTTP or RPC/HTTP protocol. The main aim is abuse the client-side Outlook features and gain a shell remotely. The full low-down on how Ruler was implemented and some background regardin...

CVE-2018-8581

CVE-2018-8581 Si tratta di una vulnerabilità di movimento laterale e di escalation dei privilegi a livello di mailbox Consente, dopo aver ottenuto le credenziali di un account di posta normale, di prendere il controllo della casella di posta di altri utenti inclusi gli amministratori di dominio...