Lucene search
+L

31 matches found

Kitploit
Kitploit
added 2026/08/25 10:44 p.m.2 views

exchange-0days-202103

exchange-0days-202103 针对CVE-2021-26855、CVE-2021-26857、CVE-2021-26858和CVE-2021-27065漏洞利用的IoC判定。...

9.8CVSS0.99996EPSS
SaveExploits68
Kitploit
Kitploit
added 2026/08/25 3:06 p.m.1 views

ExchangeSSRFtoRCEExploit

Exchange SSRF から RCE へのエクスプロイト ⚠️教育および学習目的のみ CVE-2021-26855 CVE-2021-27065 使用方法 root@kitploit: ProxyLogon-Exchange SSRF to RCE Exploit Chain. - Author @Evilash ./ExchangeSSRFtoRCEChainExploit.py RCE への現実的で安定したエクスプロイトです。お楽しみください : Fofa クエリ root@kitploit: microsoft exchange 2013:...

9.8CVSS8.7AI score0.99996EPSS
SaveExploits67
Kitploit
Kitploit
added 2026/08/25 4:55 a.m.1 views

CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065

CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065 CTT增强版的Microsoft Exchange Server SSRF到RCE漏洞利用(ProxyShell/ProxyLogon),另一个CVSS 10.0关键漏洞,影响了全球数十万个组织。 🏢 CTT Exchange RCE 漏洞利用 v1.0 基于收敛时间理论(CTT)增强的Microsoft Exchange Server漏洞利用框架 🚨 概述 CTT-Exchange-RCE...

9.8CVSS8.7AI score0.99996EPSS
SaveExploits67
Kitploit
Kitploit
added 2026/08/25 4:26 a.m.1 views

Microsoft-Exchange-RCE

Microsoft-Exchange-RCE Microsoft Exchange CVE-2021-26855&CVE-2021-27065...

9.8CVSS0.99996EPSS
SaveExploits67
Kitploit
Kitploit
added 2026/08/25 4:19 a.m.1 views

CVE-2021-26855-Exchange-RCE

CVE-2021-26855-Exchange-RCE Microsoft Exchange Proxylogon Exploit Chain EXP解析 + CVE-2021–26855 + CVE-2021–27065 再現まとめ...

9.8CVSS8.7AI score0.99996EPSS
SaveExploits67
Kitploit
Kitploit
added 2026/08/25 12:24 a.m.2 views

cve-2021-27065

盗まれたデータの検索に基づいて、新しいコードを追加したり既存のコードを修正したりし続けます 侵害された場合、これらのスクリプトは決してそれを修正してくれるわけではありません! これらのスクリプトは、システムで何が起こったのかを知る以外には、あなたにとって何の利益も提供しません。 とはいえ、システムからどのようなデータが盗まれた可能性があるかについての調査で使用しているスクリプトを、ここに追加し続けます。 便利なリンク 1...

7.8CVSS0.99876EPSS
SaveExploits31
Kitploit
Kitploit
added 2026/08/20 11:40 p.m.1 views

proxylogon-exploit

proxylogon 针对 CVE-2021-26855 和 CVE-2021-27065 的概念验证利用代码,可在 Microsoft Exchange 上实现未经认证的远程代码执行,如以下资源所述: https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers https://www.volexity.com/blog/2021/03/02/active-exploitation-of-microsoft-exchange-zero-day-vulnerabilities...

9.8CVSS0.99996EPSS
SaveExploits67
Information Security Automation
Information Security Automation
added 2022/10/21 8:10 p.m.168 views

Joint Advisory AA22-279A and Vulristics

Hello everyone! This episode will be about the new hot twenty vulnerabilities from CISA, NSA and FBI, Joint cybersecurity advisory CSA AA22-279A, and how I analyzed these vulnerabilities using my open source project Vulristics. Alternative video link for Russia: Americans cant just release a list...

10CVSS1.1AI score0.99999EPSS
SaveExploits999
Securelist
Securelist
added 2021/06/17 10:00 a.m.434 views

Black Kingdom ransomware

Black Kingdom ransomware appeared on the scene back in 2019, but we observed some activity again in 2021. The ransomware was used by an unknown adversary for exploiting a Microsoft Exchange vulnerability CVE-2021-27065. The complexity and sophistication of the Black Kingdom family cannot bear a...

7.5CVSS0.9AI score0.99999EPSS
SaveExploits89
ThreatPost
ThreatPost
added 2021/05/10 5:37 p.m.805 views

Lemon Duck Cryptojacking Botnet Changes Up Tactics

The Lemon Duck cryptocurrency-mining botnet has added the ProxyLogon group of exploits to its bag of tricks, targeting Microsoft Exchange servers. That’s according to researchers at Cisco Talos, who said that the cybercrime group behind Lemon Duck has also added the Cobalt Strike attack framework...

10CVSS7.7AI score0.99999EPSS
SaveExploits194References15
zdt
zdt
added 2021/03/23 12:00 a.m.330 views

Microsoft Exchange ProxyLogon Remote Code Execution Exploit

This Metasploit module exploits a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication, impersonating as the admin CVE-2021-26855 and write arbitrary file CVE-2021-27065 to get the RCE Remote Code Execution. By taking advantage of this vulnerability, you...

9.1CVSS9.6AI score0.99996EPSS
SaveExploits67
Packet Storm
Packet Storm
added 2021/03/23 12:00 a.m.581 views

Microsoft Exchange ProxyLogon Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Microsoft Exchange ProxyLogon RCE', 'Description' = %q This module exploit a vulnerability on Microsoft Exchange Server that allows an attacker...

7.5CVSS0.3AI score0.99996EPSS
SaveExploits67
MSRC
MSRC
added 2021/03/16 6:44 p.m.247 views

Guidance for responders: Investigating and remediating on-premises Exchange Server vulnerabilities

This guidance will help customers address threats taking advantage of the recently disclosed Microsoft Exchange Server on-premises vulnerabilities CVE-2021-26855, CVE-2021-26858, CVE-2021-26857, and CVE-2021-27065. Microsoft will continue to monitor these threats and provide updated tools and...

7.5CVSS2.7AI score0.99996EPSS
SaveExploits68
MSRC
MSRC
added 2021/03/16 7:00 a.m.90 views

Guidance for responders: Investigating and remediating on-premises Exchange Server vulnerabilities

This guidance will help customers address threats taking advantage of the recently disclosed Microsoft Exchange Server on-premises vulnerabilities CVE-2021-26855, CVE-2021-26858, CVE-2021-26857, and CVE-2021-27065, which are being exploited. We strongly urge customers to immediately update system...

7.5CVSS2.2AI score0.99996EPSS
SaveExploits68
MSRC
MSRC
added 2021/03/16 7:00 a.m.109 views

Guidance for responders: Investigating and remediating on-premises Exchange Server vulnerabilities

This guidance will help customers address threats taking advantage of the recently disclosed Microsoft Exchange Server on-premises vulnerabilities CVE-2021-26855, CVE-2021-26858, CVE-2021-26857, and CVE-2021-27065, which are being exploited. We strongly urge customers to immediately update system...

9.8CVSS7AI score0.99996EPSS
SaveExploits68
Akamai Blog
Akamai Blog
added 2021/03/15 10:30 p.m.551 views

How Akamai Can Help You Fight the Latest Exploitation Attempts Against Microsoft Exchange

Co-authored by Ryan Barnett. AppSec Protections for Microsoft Exchange CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065 On March 2, 2021, the Microsoft Security Response Center alerted its customers to several critical security updates to Microsoft Exchange Server, addressing...

7.5CVSS10AI score0.99996EPSS
SaveExploits68
zdt
zdt
added 2021/03/11 12:00 a.m.238 views

Microsoft Exchange 2019 - SSRF to Arbitrary File Write (Proxylogon) Exploit

Exploit Title: Microsoft Exchange 2019 - SSRF to Arbitrary File Write Proxylogon Date: 2021-03-10 Exploit Author: testanull Vendor Homepage: https://www.microsoft.com Version: MS Exchange Server 2013, 2016, 2019 CVE: 2021-26855, 2021-27065 import requests from urllib3.exceptions import...

9.8CVSS0.5AI score0.99996EPSS
SaveExploits67
Talos Blog
Talos Blog
added 2021/03/08 10:18 a.m.516 views

Threat Advisory: HAFNIUM and Microsoft Exchange zero-day

Microsoft released patches for four vulnerabilities in Exchange Server on March 2, disclosing that these vulnerabilities were being exploited by a previously unknown threat actor, referred to as HAFNIUM. The vulnerabilities in question — CVE-2021-26855, CVE-2021-26857, CVE-2021-26858 and...

7.5CVSS1.2AI score0.99996EPSS
SaveExploits68
FireEye
FireEye
added 2021/03/04 12:00 a.m.606 views

Detection and Response to Exploitation of Microsoft Exchange Zero-Day Vulnerabilities

Beginning in January 2021, Mandiant Managed Defense observed multiple instances of abuse of Microsoft Exchange Server within at least one client environment. The observed activity included creation of web shells for persistent access, remote code execution, and reconnaissance for endpoint securit...

7.5CVSS9.8AI score0.99996EPSS
SaveExploits68References10
Qualys Blog
Qualys Blog
added 2021/03/03 10:12 p.m.1811 views

Microsoft Exchange Server Zero-Days (ProxyLogon) – Automatically Discover, Prioritize and Remediate Using Qualys VMDR

Update March 10, 2021: A new section describes how to respond with mitigation controls if patches cannot be applied, as recommended by Microsoft. This section details the Qualys Policy Compliance control ids for each vulnerability. Update March 8, 2021: Qualys has released an additional QID: 5010...

7.5CVSS0.1AI score0.99996EPSS
SaveExploits71
Rows per page
Query Builder