CVE-2022-41040

CVE-2022-41040 CVE-2022-41040 nuclei template Unverified! Usage git clone https://github.com/numanturle/CVE-2022-41040 cd CVE-2022-41040 nuclei -u https://target -t owa.yaml GET /autodiscover/[email protected]/BACKENDAPI?&Email=autodiscover/autodiscover.json%[email protected] HTTP/1.1...

libtaxii

libtaxii A Python library for handling Trusted Automated eXchange of Indicator Information TAXII™ v1.x Messages and invoking TAXII Services. :Source: https://github.com/TAXIIProject/libtaxii/ :Documentation: https://libtaxii.readthedocs.io/ :Information: https://taxiiproject.github.io/ :Download:...

Exchange2domain

Exchange2domain privexchange のオールインワンツール。Webサーバーポートを開くだけで良いため、高い権限は必要ありません 。 素晴らしい解説記事: Abusing Exchange: One API call away from Domain Admin. 必要条件 これらのツールは impacket を必要とします。pip から pip install impacket でインストールできます。 使用方法 usage: Exchange2domain.py -h -u USERNAME -d DOMAIN -p PASSWORD --hashes HASHE...

Exchange2domain

Exchange2domain All in One tools of privexchange . You only need to open the web server port, so no high privileges are required. Great writeup! Abusing Exchange: One API call away from Domain Admin. Requirements These tools require impacket. You can install it from pip with pip install impacket...

Knowledge-Base

Knowledge Base 慢雾安全团队知识库 慢雾科技：https://www.slowmist.com 慢雾区：https://www.slowmist.io 我们在努力成为区块链世界的“安全基础设施”。未知的才是有趣的，已知的如果不分享将会变得索然无味。 We strive to become the "security infrastructure" of the blockchain world. The unknown is what makes things exciting — what's already known becomes dull if not share...

cve-2024-6387-poc

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...

CVE-2020-0688-Scanner

CVE-2020-0688-Scanner Quick C tool for checking CVE-2020-0688 on multiple hosts with a non-intrusive method. Features Scan hosts from an input file. Passive check : grab exchange version by scraping html content. Produces an output file. Demo How to use Prerequisite Windows .NET framework 4.5.2...

CVE-2020-0688

Identify Exchange Servers vulnerable to CVE-2020-0688 CVE-2020-0688 is a critical vulnerability in Microsoft Exchange due to use of static keys. Although exploitation requires valid credentials at an email user level and the risk of mass-exploitation is low, this vulnerability might be very usefu...

OWASSRF-CVE-2022-41082-POC

CVE-2022-41082-POC PoC for the CVE-2022-41082 NotProxyShell OWASSRF Vulnerability Effecting Microsoft Exchange Servers This is Post-Auth RCE for ProxyNotShell OWASSRF, valid cardentials are needed for command execution. Added the Powershell PoC script for TabShell Vulnerability CVE-2022-41076 The...

CVE-2021-41349

Microsoft Exchange Exploit CVE-2021-41349 悪用対象: CVE-2021-41349 この悪用ツールは、対象のExchangeサーバーにXSSペイロードをPOSTするためのフォームを作成します。 実行したい内容を含むjsファイルを作成する必要があります。 使用方法 1. jsペイロードを作成し、どこかにアップロードします。 2. 以下の手順に従ってCVE-2021-41349.pyを実行します。 python3 CVE-2021-41349.py "https://mail.target.com"...

ZackAttack

===== ZackAttack! - Realying NTLM Like Nobody's Business ======= WTF Is This? tl;dr version - ZackAttack! is a new Tool Set to do NTLM Authentication relaying unlike any other tool currently out there. = So how is ZackAttack! different / better? Compared to other tools... Supports NTLMv2 : Brings...

CVE-2021-33766

POC Exploit CVE-2021-33766 ProxyToken POC Exploit for CVE-2021-33766 ProxyToken is a handy shell script which provides pentesters and security researchers a quick and effective way to test Microsoft Exchange ProxyToken vulnerability. Disclaimer This program is for Educational purpose ONLY. Do not...

Zirconium

ZIRCONIUM ZIRCONIUMは、HAFNIUMが使用するゼロデイエクスプロイトの兆候を検出するため、Exchangeサーバー上の侵害指標（IOC）をスキャンするために作成されました。 ZIRCONIUMは以下を検索します： CVE-2021-26855 CVE-2021-26958 CVE-2021-26857 CVE-2021-27027065 不審な .dmp ファイル inetpub および Exchange のファイルパスで見つかった .aspnet ファイル 使用方法 ZIRCONIUMの最新版をダウンロードしてください：...

HAFNIUM-Microsoft-Exchange-0day

Cool Resources CheckMyOWA What is it? We set up this site to aid victim notification based on lists of compromised Exchange servers with Outlook Web AccessOWA enabled, which were obtained from perpetrators of this mass breach event. This includes affected IPs/domains, as well as whether the actor...

CVE-2026-51416

1. 概要 脆弱性タイプ : サービス拒否 / 無制限のHTTPレスポンス読み取り CWE-400 フラグ付き場所 : backend/internal/handler/authwechatoauth.go:1149 脆弱性の説明 : WeChat OAuthトークン交換プロセスは、io.ReadAllresp.Body を使用して上流のHTTPレスポンスボディ全体をメモリに読み込みますが、バッファリング前に最大サイズ制限を一切適用していません。 2. 分析 ステップ 1: フラグ付きシンクを...

CVE-2021-28482-Exchange-POC

This repository does not have a README...

formal_np1sec

Research into proving the confidentiality of the group key in the group key exchange part of n+1sec, with certain limitations such as having only 3 participants. This work was done by Alex Balducci and Andy Lee. The main document is gkepnormxormsimplifiedwriteup.txt. It contains references to the...

CVE-2021-33766-ProxyToken

CVE-2021-33766 ProxyToken Supports single target detection and batch detection, supports email forwarding rule modification Usage Vulnerability detection and email forwarding rule modification Email forwarding rule modification result Email sending test References...

CVE-2021-34473

CVE-2021-34473 CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability Reproducing ProxyShell Exploit https://y4y.space/2021/08/12/my-steps-of-reproducing-proxyshell/ This is NOT your Cyberweapon just a experimental PoC...

ProxyShell

ProxyShell CVE-2021-34473 CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability. This faulty URL normalization lets us access an arbitrary backend URL while running as the Exchange Server machine account. Although this bug is not as powerful as the SSRF in ProxyLogon, and w...