Flangvik

Flangvik CVE-2021-26855 일명 ProxyLogon를 위한 C PoC, 전형적인 반-대화형 웹 셸 및 셸코드를 지원합니다…...

proxylogon-exploit

proxylogon 针对 CVE-2021-26855 和 CVE-2021-27065 的概念验证利用代码，可在 Microsoft Exchange 上实现未经认证的远程代码执行，如以下资源所述： https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers https://www.volexity.com/blog/2021/03/02/active-exploitation-of-microsoft-exchange-zero-day-vulnerabilities...

ProxyLogon

면책 조항: 이 저장소에 제공된 모든 정보는 교육 및 연구 목적으로만 제공됩니다. 저자는 여기에 있는 정보나 코드의 오용에 대해 어떠한 책임도 지지 않습니다. 이 익스플로잇을 안전한 사전 구성 환경에서 사용하려면 https://community.immersivelabs.online/signin을 방문하여 무료 계정에 가입하십시오. ProxyLogon CVE-2021-26855와 CVE-2021-26857을 체이닝하여 Microsoft Exchange를 익스플로잇...

SharpProxyLogon

SharpProxyLogon C POC для цепочки RCE ProxyLogon root@kitploit: / \ | / \ / / \ | ' \ / | '| ' \ / // '/ \ / / | | |/ / / \ / |/ | ' \ \ \ | | | | | | | | / /| | | Usage x64 injection: SharpProxyLogon.exe Внедрение шеллкода использует встроенный TikiTorch stub от @Rastamouse, который запускает,...

Flangvik

Flangvik C POC для CVE-2021-26855, также известного как ProxyLogon, поддерживает классическую полуинтерактивную веб-оболочку, а также shellcode в…...

New SharkLoader Malware Deploys Cobalt Strike in StrikeShark Cyberattacks

A newly discovered cyber attack campaign has been observed delivering a previously undocumented malware family called SharkLoader that acts as a loader for deploying Cobalt Strike Beacon on compromised hosts. Kaspersky, which is tracking the activity under the moniker StrikeShark , said the...

China-Linked Hackers Target Asian Governments, NATO State, Journalists, and Activists

Cybersecurity researchers have disclosed details of a new China-aligned espionage campaign targeting government and defense sectors across South, East, and Southeast Asia, along with one European government belonging to NATO. Trend Micro has attributed the activity to a threat activity cluster it...

Exploit for Server-Side Request Forgery in Microsoft

CTT-ProxyLogon-RCE-v1.0---Convergent-Time-Theory-Enhanced-Micr...

ProxyVulns

ProxyVulns ProxyLogon Usage: python3 26855.py 1.1.1.1 ProxyOracle url Once a victim clicks this link, evil.com will receive the cookies...

Microsoft Exchange ProxyLogon Scanner

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework begin auxiliary class class MetasploitModule 'Microsoft Exchange ProxyLogon Scanner', 'Description' = %q This module scan for a vulnerability on Microsoft Exchange Serve...

Microsoft Exchange ProxyLogon Collector

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework begin auxiliary class class MetasploitModule 'Microsoft Exchange ProxyLogon Collector', 'Description' = %q This module exploit a vulnerability on Microsoft Exchange Serv...

Exploit for Server-Side Request Forgery in Microsoft

CVE-2021-26855 This is a modified version of a POC for proxyl...

Chinese RedGolf Group Targeting Windows and Linux Systems with KEYPLUG Backdoor

A Chinese state-sponsored threat activity group tracked as RedGolf has been attributed to the use of a custom Windows and Linux backdoor called KEYPLUG. "RedGolf is a particularly prolific Chinese state-sponsored threat actor group that has likely been active for many years against a wide range o...

New Version of Prometei Botnet Infects Over 10,000 Systems Worldwide

An updated version of a botnet malware called Prometei has infected more than 10,000 systems worldwide since November 2022. The infections are both geographically indiscriminate and opportunistic, with a majority of the victims reported in Brazil, Indonesia, and Turkey. Prometei, first observed i...

Microsoft Urges Customers to Secure On-Premises Exchange Servers

Microsoft is urging customers to keep their Exchange servers updated as well as take steps to bolster the environment, such as enabling Windows Extended Protection and configuring certificate-based signing of PowerShell serialization payloads. "Attackers looking to exploit unpatched Exchange...

FIN7 Cybercrime Syndicate Emerges as a Major Player in Ransomware Landscape

An exhaustive analysis of FIN7 has unmasked the cybercrime syndicate's organizational hierarchy, alongside unraveling its role as an affiliate for mounting ransomware attacks. It has also exposed deeper associations between the group and the larger threat ecosystem comprising the now-defunct...

Budworm Hackers Resurface with New Espionage Attacks Aimed at U.S. Organization

An advanced persistent threat APT actor known as Budworm targeted a U.S.-based entity for the first time in more than six years, according to latest research. The attack was aimed at an unnamed U.S. state legislature, the Symantec Threat Hunter team, part of Broadcom Software, said in a report...

FBI, CISA, and NSA Reveal How Hackers Targeted a Defense Industrial Base Organization

U.S. cybersecurity and intelligence agencies on Tuesday disclosed that multiple nation-state hacking groups potentially targeted a "Defense Industrial Base DIB Sector organization's enterprise network" as part of a cyber espionage campaign. "Advanced persistent threat actors used an open-source...

Cyber Attacks Against Middle East Governments Hide Malware in Windows Logo

An espionage-focused threat actor has been observed using a steganographic trick to conceal a previously undocumented backdoor in a Windows logo in its attacks against Middle Eastern governments. Broadcom's Symantec Threat Hunter Team attributed the updated tooling to a hacking group it tracks...

External attack surface and ongoing cybercriminal activity in APAC region

To prevent a cyberattack, it is vital to know what the attack surface for your organization is. To be prepared to repel the attacks of cybercriminals, businesses around the world collect threat intelligence themselves or subscribe for threat intelligence services. Continuous threat research enabl...