mobileiron-exploit

使用 Kerberos 认证的 Tabshell 漏洞利用 改编自 OWASSRF + TabShell 漏洞利用链 首先，对 pyprsp 模块打补丁以启用 WSManStackVersion 降级，并安装依赖项 $ git clone https://github.com/jborean93/pypsrp $ patch -p0 pyprsp.patch patching file pypsrp/src/pypsrp/complexobjects.py patching file pypsrp/src/pypsrp/powershell.py patching file...

CVE-2022-41082

Microsoft Exchange Server Remote Code Execution Vulnerability Recent assessments: zeroSteiner at January 10, 2023 2:58pm UTC reported: CVE-2022-41082, also known as ProxyNotShell is an authenticated RCE in Microsoft Exchange. ProxyNotShell actually combines CVE-2022-41082 and CVE-2022-41040 for t...