16777 matches found
NotProxyShellHunter
NotProxyShellHunter NotProxyShell CVE-2022-40140 & CVE-2022-41082 ใใใงใใฏ...
CVE-2026-86814
creationtimestamp| type| source ---|---|--- 2026-09-19 07:30:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/117296530943304712 2026-09-19 07:30:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mvu5ysa5xr2p 2026-09-19 15:03:41+00:00| seen|...
DHEater
DHEater DHEater is the proof-of-concept implementation of the DHEat attack CVE-2002-20001. It saturates a server's CPU by enforcing Diffie-Hellman ephemeral DHE or elliptic-curve Diffie-Hellman ephemeral ECDHE key exchange over both TLS and SSH. For further information about the attack visit the...
0dayex-checker
0dayex-checker ใผใญใใค Microsoft Exchange Server ใใงใใซใผ ไปฎๆณใใใใใงใใซใผ...
TokenMan
ใขใฏใปใน ใใผใฏใณใจๆดๆฐใใผใฏใณใฎในใคใผใใ Token Man ใฏใAAD ใฎใขใฏใปใน ใใผใฏใณใใใณ๏ผใพใใฏๆดๆฐใใผใฏใณใไฝฟ็จใใใในใใจใฏในใใญใคใใผใทใงใณๆดปๅใๆฏๆดใใใใผใซใงใใ ็ฎๆฌก ไฝฟใๆน ใณใใณใ Fetch Search Swap FOCI ใขใใชใฑใผใทใงใณ ใฏใฉใคใขใณใ ID ใใใ AZ OAuth ไฝฟใๆน root@kitploit: usage: tokenman.py -h fetch,search,swap,az,oauth ... Token Man -- v0.1.1 positional arguments:...
ProxyNotShell-PoC
CVE-2022-41040 ใใใณ CVE-2022-41082 ็จใฎๅไฝใใ PoC๏ผๅฅๅ ProxyNotShell๏ผ ่ฆไปถ: pip install requestsntlm2 requests ไฝฟ็จๆนๆณ: root@kitploit: python pocaug3.py ใฏใฌใธใใ: ProxyShell PoC ในใฏใชใใใฎๅบๅ ธ: https://blog.viettelcybersecurity.com/pwn2own-2021-microsoft-exchange-exploit-chain/ Gtsc ใฎใใญใฐ่จไบ...
SharpExchange
SharpExchange ใใฎใณใใณใใฉใคใณใใผใซใฏใC ใไฝฟ็จใใฆ Microsoft Exchange EWS ใจๅฏพ่ฉฑใงใใใใจใ็คบใ POC ใงใใPowerShell ไปฅๅคใฎใใผใซใงใๅฎ่กใงใใใใจใ็คบใใฆใใพใใ ใฏใใใใใฏใใใๅฏ่ฝใงใใใใจใ็คบใใใใฎๅ็ดใช POC ใงใใ100% ๅฎๅ จใงใฏใใใพใใใใใชใใฎ l33t ใช C ใณใผใใผใพใใฏใฌใใใใผใใผใฎในใญใซใๆซ้ฒใใใใชใใใใซใชใฏใจในใใ้ใใฆใใ ใใ : ใใใฏๆ่ฒ็ฎ็ใฎใฟใงใใๆช็จใ้ๆณ่ก็บใซใฏไฝฟ็จใใชใใงใใ ใใใ MS ใใญใฅใกใณใ:...
Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)
Microsoft Exchange Server contains a remote code execution caused by improper input validation in the server component, letting remote attackers execute arbitrary code, exploit requires network access to the server. id: CVE-2021-28480 info: name: Microsoft Exchange - Pre-Auth SSRF / ACL Bypass...
Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting
Microsoft Exchange Server is vulnerable to a spoofing vulnerability. Be aware this CVE ID is unique from CVE-2021-42305. id: CVE-2021-41349 info: name: Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting author: rootxharsh,iamnoooob severity: medium description: Microsoft Exchange...
CVE-2026-75885
creationtimestamp| type| source ---|---|--- 2026-09-18 23:01:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvtbknukgk2v 2026-09-19 00:00:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvtetlh4ez2b 2026-09-19 00:00:38+00:00| seen|...
p2p
P2P Remote Desktop P2Pใใผในใฎใชใขใผใใในใฏใใใ - ใใผใฟใใซใ่จญๅฎใใคใณในใใผใซใฏไธ่ฆใงใใ ไป็ตใฟ 2ๅฐใฎ็ฐใชใPCใง็ฎก็่ ใจใใฆ p2p.exe ใใณใณใใคใซใใฆ้ใใพใใ My Lan or Wan IP ใใณใใผใใฆ็ธๆใฎใใขใซไผใใ็ธๆใๅๆงใซใใชใใซไผใใพใใ 2ใคใฎใใขใฏๆฅ็ถๅ ใฎ2ใคใฎใจใณใใใคใณใใๆใซๅ ฅใใใฎใงใไธกๆนใง Connect ใๆผใใพใใ 2ใคใฎใใขใฏไบใใซ ใกใใปใผใธใ้ไฟก ใใใใใชใขใผใใในใฏใใใๅถๅพก ใ่กใใใใใซใชใใพใใ ใใใฏ UDTใใญใใณใซ ใไฝฟ็จใใฆใใพใใ rendezvous...
CVE-2022-41040
CVE-2022-41040 Microsoft Exchangeใใตใผใใผใตใคใใชใฏใจในใใใฉใผใธใงใชใซๅฏพใใฆ่ๅผฑ ใใคใญใผใ : /autodiscover/autodiscover.json?@URL/&Email=autodiscover/autodiscover.json%3f@URL /autodiscover/autodiscover.json?@%d.v1.COLLABHERE/&Email=autodiscover/autodiscover.json%3f@%d.v1.COLLABHERE...
Triage-CVE-2021-26855-ProxyLogon---Microsoft-Exchange-
ใใชใขใผใธ: CVE-2021-26855๏ผProxyLogon - Microsoft Exchange๏ผ ใใฎใฉใใงใฏใใปใญใฅใชใใฃใใผใ ใ่กใใใใซใใใ็ฅใใใๅฎ้ใฎ่ๅผฑๆงใฎใใชใขใผใธใๅฎ่ทตใใใใจใ็ฎ็ใจใใพใใใCVE ใฎ่ฉณ็ดฐใ่ชญใฟใCVSS ในใณใขใ็่งฃใใ็ถๆณใซๅฟใใฆๅฎ้ใฎใชในใฏใใฉใฎ็จๅบฆใใ่ใใใจใใๆตใใงใใ ในใใใ 1: NVD ใง CVE ใ้ใ National Vulnerability Database๏ผNVD๏ผใซใขใฏใปในใใCVE ใ่ชฟในใพใใใ root@kitploit:...
cve-2025-26466-openssh-poc
CVE-2025-26466 OpenSSH SSH2MSGPING DoS PoC ๅ ่ฒฌไบ้ : ใใฎใณใผใใฏๆ่ฒ็ฎ็ ใใใณ่จฑๅฏใใใใปใญใฅใชใใฃใในใๅฐ็จใงใใ็ก่จฑๅฏใงไปไบบใฎใทในใใ ใๆปๆใใใใจใฏ้ๆณใงใใ ่ๅผฑๆง CVE-2025-26466 ใฏใOpenSSH ใซใใใไบๅ่ช่จผๅใตใผใในๆๅฆ DoS ใฎ่ๅผฑๆงใงใใใ้ตไบคๆ Key Exchange ใฎๅฎไบๅใซ SSH ใตใผใใผใ้่ฒ ่ทใซใใใใจใใงใใพใใ ๆ่ก็่ฉณ็ดฐ ๅฝฑ้ฟใๅใใใใผใธใงใณ: 9.9p2 ใใๅใฎ OpenSSH ็จฎๅฅ: Pre-Auth DoS / ใกใขใชใชใผใฏ ๆช็จๆนๆณ: ๆๅทๅๆฅ็ถใ็ขบ็ซใใใๅใซ...
exchange-scanner
Microsoft Exchange Server ในใญใฃใ ่ชฌๆ ใใฎใใผใซใฏใๅฏพ่ฑกใในใไธใฎใใใคใใฎไธ่ฌ็ใชๅ ฌ้ใตใผใในใในใญใฃใณใใฆใMicrosoft Exchange Server ใๆคๅบใใๅฏ่ฝใงใใใฐใใฎใฝใใใฆใงใขใใผใธใงใณใใใฃใณใฌใผใใชใณใใใพใใ ใใใๅฎ็พใใใใใซใไปฅไธใฎๆๆณใไฝฟ็จใใพใใ ใฌในใใณในใใใใผใใญใฐใคใณใใผใธใฎใณใณใใณใใfavicon ใใใทใฅใซใใ Outlook Web Access OWA ใฎใใฃใณใฌใผใใชใณใ XML ใฌในใใณในใซใใ Exchange Control Panel ECP ใจใฏในใใผใใใผใซใฎใใฃใณใฌใผใใชใณใ...
reternal-quickstart
RE:TERNAL Note: Still under development, only use for testing and do not expose interfaces! Current compose doesn't work yet, only try when you know what you're doing RE:TERNAL is a centralised purple team orchestration service to manage third-party C2 frameworks. Agents are installed on endpoint...
cve-2021-27065
I will continue to add any new code or modify existing code based on searching for stolen data If you have been compromised these scripts will by no means fix it for you! These provide no benifit to you other than you now knowing the extent of what has happened to your system With that being said...
Exch-CVE-2021-26855
Exch-CVE-2021-26855 ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability...
exchange_webshell_detection
์ด ํ๋ก์ ํธ๋ ์ค๋จ๋์์ต๋๋ค ๋์ Microsoft ๋๊ตฌ๋ฅผ ์ฌ์ฉํ์ญ์์ค: Microsoft Safety Scanner ๋ค์์ ๋์ด๋ ๊ธฐํ ํ์ง ๋ฐ ์ํ ์กฐ์น: https://github.com/microsoft/CSS-Exchange/tree/main/Security ์ํฅ ํ๊ฐ ์ ์นจํด๋ฅผ ๊ฐ์ ํ๊ณ 1์ ์ดํ ๊ณต๊ฐ์ ์ผ๋ก ๋ ธ์ถ๋ ๋ชจ๋ MS Exchange ์๋ฒ๋ฅผ ์ฌ์ ์ ๊ฒ์ฌํ ๊ฒ์ ๊ฐ๋ ฅํ ๊ถ์ฅํฉ๋๋ค. ํ์ฑ ์์ ์งํ๊ฐ ์๋๋ผ๋ ๋ง์ฐฌ๊ฐ์ง์ ๋๋ค. ๋ฐ์ดํฐ ์ ์ถ ๋ฐ ๊ตฌ์ฑ ๋ณ๊ฒฝ์ ์ ์ฉ ์ฒด์ธ์ SSRF ๋ถ๋ถ๋ง์ผ๋ก๋ ๊ฐ๋ฅํ์ผ๋ฉฐ์ฆ, ์ฝ๋ ์คํ,...
CVE-2021-28480_HoneyPoC3
ExchangeRCE-CVE-2021-28480 THIS IS NOT A REAL EXPLOIT IT IS A HONEYPOC https://blog.zsec.uk/cve-2020-1350-honeypoc/ PoC for exploiting RCE in Exchange CVEs: CVE-2021-28480, CVE-2021-28481, CVE-2021-28482 and CVE-2021-28483. Usage Achieves RCE on Exchange Servers To run, from a Linux host:...