OWASSRF-CVE-2022-41082-POC

CVE-2022-41082-POC CVE-2022-41082 NotProxyShell OWASSRF 취약점의 PoC로, Microsoft Exchange 서버에 영향을 미칩니다. 이는 ProxyNotShell OWASSRF에 대한 사후 인증 RCE이며, 명령 실행을 위해 유효한 자격 증명이 필요합니다. TabShell 취약점CVE-2022-41076을 위한 Powershell PoC 스크립트 추가 TabShell 취약점은 OWASSRF를 통해 성공적으로 접근 권한을 획득한 후 제한된 Powershell 샌드박스를 탈출할 수 있...

CVE-2022-41040-metasploit-ProxyNotShell

CVE-2022-41040-metasploit-ProxyNotShell CVE-2022-41040에 대한 metasploit 스크립트POC입니다. Microsoft Exchange는 서버 측 요청 위조SSRF 공격에 취약합니다. 인증된 공격자는 이 취약점을 사용하여 권한을 상승시킬 수 있습니다. POC 준비 root@kitploit: git clone https://github.com/TaroballzChen/CVE-2022-41040-metasploit-ProxyNotShell cd...

proxynotshell-IOC-Checker

proxynotshell-IOC-Checker Powershell スクリプト。CVE-2022-41040 と CVE-2022-41082 の IOC を確認するために使用され、コミュニティの調査および Microsoft に基づいています: GTESC The Sec Master Double Puslar Microsoft Security Resource Center Microsoft Security Blog スクリプトは、より多くの情報が利用可能になるにつれて、さらに多くの IOC を含むように更新される可能性があります。 ⬇️ ダウンロード...

ProxyNotShell-PoC

CVE-2022-41040 및 CVE-2022-41082 일명 ProxyNotShell에 대한 작동 PoC 요구 사항: pip install requestsntlm2 requests 사용법: root@kitploit: python pocaug3.py 크레딧: ProxyShell PoC 스크립트 출처: https://blog.viettelcybersecurity.com/pwn2own-2021-microsoft-exchange-exploit-chain/ Gtsc의 블로그 게시물...

CVE-2026-19900

creationtimestamp| type| source ---|---|--- 2026-08-15 17:59:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mt5auaw4h526 2026-08-16 02:45:25+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3mt667u2kn52i 2026-08-18 06:00:03+00:00| confirmed|...

FamousSparrow Targeted Oil and Gas Industry via MS Exchange Server Exploit

Bitdefender Labs reveals how the China-linked FamousSparrow hacking group targeted an Azerbaijani energy firm using ProxyNotShell, Deed RAT,…...

CVE-2023-36035

creationtimestamp| type| source ---|---|--- 2024-09-26 18:25:07+00:00| seen| https://www.thezdi.com/blog/2024/9/25/exploiting-exchange-powershell-after-proxynotshell-part-4-no-argument-constructor 2025-01-08 16:16:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/715 2025-04-30 00:12:48+00:00...

CVE-2023-36050

creationtimestamp| type| source ---|---|--- 2024-09-26 18:25:07+00:00| seen| https://www.thezdi.com/blog/2024/9/25/exploiting-exchange-powershell-after-proxynotshell-part-4-no-argument-constructor...

Exploit for Deserialization of Untrusted Data in Microsoft

CVE-2022-41082-POC PoC for the CVE-2022-41082 NotProxyShell OW...

Microsoft Urges Customers to Secure On-Premises Exchange Servers

Microsoft is urging customers to keep their Exchange servers updated as well as take steps to bolster the environment, such as enabling Windows Extended Protection and configuring certificate-based signing of PowerShell serialization payloads. "Attackers looking to exploit unpatched Exchange...

Rackspace Confirms Play Ransomware Gang Responsible for Recent Breach

Cloud services provider Rackspace on Thursday confirmed that the ransomware gang known as Play was responsible for last month's breach. The security incident, which took place on December 2, 2022, leveraged a previously unknown security exploit to gain initial access to the Rackspace Hosted...

New Exploit Method that Bypasses ProxyNotShell Mitigations

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary A new exploit method has been found in the mitigations of the Microsoft Exchange vulnerability ProxyNotShell URL rewrite that allows for remote code execution RCE on compromised servers through Outlook W...

Exploit for Deserialization of Untrusted Data in Microsoft

CVE-2022-41082-POC PoC for the CVE-2022-41082 NotProxyShell OW...

Exploit for Deserialization of Untrusted Data in Microsoft

CVE-2022-41082-POC PoC for the CVE-2022-41082 NotProxyShell OW...

Exploit for Deserialization of Untrusted Data in Microsoft

CVE-2022-41082-POC PoC for the CVE-2022-41082 NotProxyShell OW...

Ransomware Hackers Using New Way to Bypass MS Exchange ProxyNotShell Mitigations

Threat actors affiliated with a ransomware strain known as Play are leveraging a never-before-seen exploit chain that bypasses blocking rules for ProxyNotShell flaws in Microsoft Exchange Server to achieve remote code execution RCE through Outlook Web Access OWA. "The new exploit method bypasses...

Rackspace confirms it suffered a ransomware attack

It's not been a great week for cloud computing service provider Rackspace. On December 2, customers began experiencing problems connecting and logging into their Exchange environments. Rackspace started investigating and discovered an issue that affected its Hosted Exchange environments. Now...

Metasploit Weekly Wrap-Up

ProxyNotShell This week's Metasploit release includes an exploit module for CVE-2022-41082, AKA ProxyNotShell by DA-0x43-Dx4-DA-Hx2-Tx2-TP-S-Q, Orange Tsai, Piotr Bazydło, Rich Warren, Soroush Dalili, and our very own Spencer McIntyre. The vulnerability CVE-2022-41082, AKA ProxyNotShell is a...

Microsoft Exchange ProxyNotShell Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Microsoft Exchange ProxyNotShell RCE', 'Description' = %q This module chains two vulnerabilities on Microsoft Exchange Server that, when combined...

Microsoft Patch Tuesday November 2022: Exchange ProxyNotShell RCE, JScript9, MoTW, OpenSSL, Edge, CNG, Print Spooler

Hello everyone! This episode will be about Microsoft Patch Tuesday for November 2022, including vulnerabilities that were added between October and November Patch Tuesdays. As usual, I use my open source Vulristics project to create the report. Alternative video link for Russia: The most importan...