ExchangeFinder

ExchangeFinder ExchangeFinder è uno strumento semplice e open-source che tenta di trovare istanze di Microsoft Exchange per un dato dominio, basandosi sui nomi DNS comuni più utilizzati per Microsoft Exchange. ExchangeFinder può identificare la versione esatta di Microsoft Exchange a partire da...

Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)

Microsoft Exchange Server contains a remote code execution caused by improper input validation in the server component, letting remote attackers execute arbitrary code, exploit requires network access to the server. id: CVE-2021-28480 info: name: Microsoft Exchange - Pre-Auth SSRF / ACL Bypass...

Microsoft Exchange Server - Cross-Site Scripting

Microsoft Exchange Server, or OWA, is vulnerable to a cross-site scripting vulnerability in refurl parameter of frowny.asp. id: CVE-2021-31195 info: name: Microsoft Exchange Server - Cross-Site Scripting author: infosecsanyam severity: medium description: Microsoft Exchange Server, or OWA, is...

Microsoft Exchange - Authentication Bypass

Microsoft Exchange Server Information Disclosure Vulnerability. This vulnerability enables an attacker to bypass authentication and gain access to the Exchange Server's internal. id: CVE-2021-33766 info: name: Microsoft Exchange - Authentication Bypass author: daffainfo severity: high description...

Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting

Microsoft Exchange Server is vulnerable to a spoofing vulnerability. Be aware this CVE ID is unique from CVE-2021-42305. id: CVE-2021-41349 info: name: Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting author: rootxharsh,iamnoooob severity: medium description: Microsoft Exchange...

Microsoft OWA Exchange Server 2003 - 'redir.asp' Open Redirection

Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access OWA for Exchange Server 2003 SP2 aka build 6.5.7638 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the URL parameter. id: CVE-2008-1547 info: name:...

Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)

Microsoft Exchange Server contains a remote code execution caused by improper input validation in the server component, letting remote attackers execute arbitrary code, exploit requires network access to the server. id: CVE-2021-28481 info: name: Microsoft Exchange - Pre-Auth SSRF / ACL Bypass...

CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065

CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065 Versão aprimorada pela CTT do exploit de SSRF para RCE do Microsoft Exchange Server ProxyShell/ProxyLogon, outra vulnerabilidade crítica CVSS 10.0 que afetou centenas de milhares de organizações em...

exchange_webshell_detection

Questo progetto è stato interrotto Utilizza invece gli strumenti Microsoft: Microsoft Safety Scanner Altre rilevazioni e mitigazioni elencate in: https://github.com/microsoft/CSS-Exchange/tree/main/Security Nel valutare l'impatto, suggeriamo vivamente di presumere una compromissione e di esaminar...

ProxyNotShell-PoC

CVE-2022-41040 और CVE-2022-41082 के लिए कार्यशील PoC उर्फ ProxyNotShell आवश्यकता: pip install requestsntlm2 requests उपयोग: root@kitploit: python pocaug3.py श्रेय: ProxyShell PoC स्क्रिप्ट का स्रोत: https://blog.viettelcybersecurity.com/pwn2own-2021-microsoft-exchange-exploit-chain/ Gtsc की ब्लॉग...

TokenMan

Suite per token di accesso e refresh. Token Man è uno strumento per supportare attività di post-exploitation utilizzando token di accesso e/o refresh AAD. Indice Utilizzo Comandi Fetch Search Swap Mappa degli ID client applicazione FOCI AZ OAuth Usage root@kitploit: usage: tokenman.py -h...

mobileiron-exploit

Exploit Tabshell con autenticazione Kerberos Adattato da La catena di exploit OWASSRF + TabShell Prima, applica la patch al modulo pyprsp per abilitare il downgrade di WSManStackVersion, e installa le dipendenze root@kitploit: $ git clone https://github.com/jborean93/pypsrp $ patch -p0 pyprsp.pat...

CVE-2021-26855-d

Grundlegende Verwendung:python owamails.py -u -l -p optionale Argumente: root@kitploit: -h, --help zeigt diese Hilfemeldung an und beendet das Programm -u URL, --url URL URL, Schema angeben und kein abschließendes / z.B. https://example.org -l LIST, --list LIST Benutzer-Mailboxliste -p PATH, --pa...

CVE-2022-41082-POC

CVE-2022-41082-POC CVE-2022-41082 NotProxyShell OWASSRF भेद्यता के लिए PoC जो Microsoft Exchange सर्वरों को प्रभावित करती है यह ProxyNotShell OWASSRF के लिए पोस्ट-प्रमाणीकरण RCE है, कमांड निष्पादन के लिए मान्य प्रमाण-पत्र आवश्यक हैं। TabShell भेद्यता CVE-2022-41076 के लिए Powershell PoC स्क्रिप्ट...

ExchangeRelayX

ExchangeRelayX Versione 1.0.0. Questo strumento è un PoC per dimostrare la capacità di un attaccante di effettuare un attacco di relay NTLM basato su SMB o HTTP verso l'endpoint EWS su un server Microsoft Exchange on-premise per compromettere la cassetta postale della vittima. Questo strumento...

Carnivore

Rilasciato come open source da NCC Group Plc - https://www.nccgroup.com/ Sviluppato da Chris Nevin, [email protected] https://www.github.com/nccgroup/carnivore Rilasciato sotto licenza AGPL https://www.github.com/nccgroup/carnivore/license Carnivore - V.1.0.4 Strumento di Valutazione Esterna...

ProxyShell

ProxyShell Installazione root@kitploit: git clone https://github.com/ktecv2000/ProxyShell cd ProxyShell virtualenv -p $which python3 venv source venv/bin/activate pip3 install pypsrp cp wsman.py venv/lib//site-packages/pypsrp/wsman.py Utilizzo root@kitploit: python3 exploit.py...

CVE-2021-34473-scanner

CVE-2021-34473-scanner ماسح ضوئي لـ CVE-2021-34473، ثغرة ProxyShell، وهي ثغرة في Microsoft Exchange المحلي لاختبار الآلات واحدة تلو الأخرى، استخدم scanner-CVE-2021-34473.bat: scanner-CVE-2021-34473.bat mail.exemple.fr لاختبار آلات متعددة دفعة واحدة، استخدم mass-scanner وأضف عنوان IP / FQDN المراد...

ZackAttack

===== ZackAttack! – NTLM-Relaying wie kein anderes Tool ======= WTF ist das? tl;dr-Version – ZackAttack! ist eine neue Tool-Sammlung für NTLM-Authentifizierungs-Relaying, wie es derzeit kein anderes Tool gibt. = Wie ist ZackAttack! anders/besser? Im Vergleich zu anderen Tools... Unterstützt NTLMv...

cve-2021-27065

Continuerò ad aggiungere nuovo codice o a modificare il codice esistente basandomi sulla ricerca di dati rubati Se sei stato compromesso, questi script non ti risolveranno il problema! Questi non ti forniscono alcun beneficio se non quello di sapere ora l'entità di ciò che è accaduto al tuo siste...