Proxyshell-Scanner

Proxyshell-Scanner сканер nuclei для Proxyshell RCE CVE-2021-34423,CVE-2021-34473,CVE-2021-31207, обнаруженного orange tsai на Pwn2Own и затрагивающего Microsoft Exchange Server. POC Ресурсы https://blog.orange.tw/2021/08/proxylogon-a-new-attack-surface-on-ms-exchange-part-1.html...

ProxyShell

ProxyShell Installation git clone https://github.com/ktecv2000/ProxyShell cd ProxyShell virtualenv -p $which python3 venv source venv/bin/activate pip3 install pypsrp cp wsman.py venv/lib//site-packages/pypsrp/wsman.py Utilisation python3 exploit.py...

proxyshell

ProxyShell Preuve de concept d'exploit pour Microsoft Exchange CVE-2021-34473, CVE-2021-34523, CVE-2021-31207 Détails Pour des informations contextuelles et de fond, lisez le billet de blog détaillant les recherches d'Horizon3 : https://www.horizon3.ai/news/blog/proxyshell Fonctionnalités Aucune...

CVE-2021-34473-scanner

CVE-2021-34473-scanner Scanner pour CVE-2021-34473, ProxyShell, une vulnérabilité Microsoft Exchange sur site Pour tester les machines une par une, utilisez scanner-CVE-2021-34473.bat : scanner-CVE-2021-34473.bat mail.exemple.fr Pour tester plusieurs machines à la fois, utilisez mass-scanner et...

ProxyVulns

ProxyVulns ProxyLogon Usage: python3 26855.py 1.1.1.1 ProxyOracle Once a victim clicks this link, evil.com will receive the cookies...

CVE-2021-34473-Exchange-ProxyShell

python sendwebshellmail.py https://mail16.echod.com [email protected] récupération unique python sendwebshellmail.py https://mail16.echod.com crack Lire en masse les emails depuis mail.txt, tenter d'obtenir le token SID python sendwebshellmail.py https://mail16.echod.com [email protected]...

ProxyShell-CVE-2021-34473.py

ProxyShell-CVE-2021-34473 Простой скрипт для проверки на ProxyShell...

CVE-2021-34473

CVE-2021-34473 CVE-2021-34473 Vulnérabilité d'exécution de code à distance sur Microsoft Exchange Server Reproduction de l'exploitation ProxyShell https://y4y.space/2021/08/12/my-steps-of-reproducing-proxyshell/ Ceci n'est PAS une arme cybernétique, juste un PoC expérimental...

CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065

CTT-Exchange-RCE-v1.0---Exploitation-Microsoft-Exchange---CVSS-10.0-CRITIQUE---CVE-2021-26855---CVE-2021-27065 Version améliorée par CTT de l'exploit SSRF vers RCE du serveur Microsoft Exchange ProxyShell/ProxyLogon, une autre vulnérabilité critique CVSS 10.0 qui a touché des centaines de millier...

ProxyShell_POC

ProxyShellPOC POC для сканирования ProxyShellCVE-2021-34523,CVE-2021-34473,CVE-2021-31207 использование: python3 Proxyshell.py ip...

ProxyNotShell-PoC

Рабочий PoC для CVE-2022-41040 и CVE-2022-41082 также известный как ProxyNotShell Требования: pip install requestsntlm2 requests Использование: python pocaug3.py Благодарности: PoC-скрипт ProxyShell из: https://blog.viettelcybersecurity.com/pwn2own-2021-microsoft-exchange-exploit-chain/ Пост в...

Conti-Ransomware-DFIR-Investigation

Conti Ransomware — DFIR Investigation ProxyShell Exploitation...

Exploit for Unrestricted Upload of File with Dangerous Type in Microsoft

ProxyHell Modernized ProxyShell Exploit CVE-20...

ProxyVulns

ProxyVulns ProxyLogon Usage: python3 26855.py 1.1.1.1 ProxyOracle url Once a victim clicks this link, evil.com will receive the cookies...

CVE-2021-42248

...

BlackByte blends tried-and-true tradecraft with newly disclosed vulnerabilities to support ongoing attacks

The BlackByte ransomware group continues to leverage tactics, techniques and procedures TTPs that have formed the foundation of its tradecraft since its inception, continuously iterating its use of vulnerable drivers to bypass security protections and deploying a self-propagating, wormable...

MS Exchange Server Flaws Exploited to Deploy Keylogger in Targeted Attacks

An unknown threat actor is exploiting known security flaws in Microsoft Exchange Server to deploy a keylogger malware in attacks targeting entities in Africa and the Middle East. Russian cybersecurity firm Positive Technologies said it identified over 30 victims spanning government agencies, bank...

Free Decryptor Released for Black Basta and Babuk's Tortilla Ransomware Victims

A decryptor for the Tortilla variant of the Babuk ransomware has been released by Cisco Talos, allowing victims targeted by the malware to regain access to their files. The cybersecurity firm said the threat intelligence it shared with Dutch law enforcement authorities made it possible to arrest...

Major Cybersecurity Agencies Collaborate to Unveil 2022's Most Exploited Vulnerabilities

A four-year-old critical security flaw impacting Fortinet FortiOS SSL has emerged as one of the most routinely and frequently exploited vulnerabilities in 2022. "In 2022, malicious cyber actors exploited older software vulnerabilities more frequently than recently disclosed vulnerabilities and...

The five-day job: A BlackByte ransomware intrusion case study

As ransomware attacks continue to grow in number and sophistication, threat actors can quickly impact business operations if organizations are not well prepared. In a recent investigation by Microsoft Incident Response previously known as Microsoft Detection and Response Team – DART of an...