formal_np1sec

Research into proving the confidentiality of the group key in the group key exchange part of n+1sec, with certain limitations such as having only 3 participants. This work was done by Alex Balducci and Andy Lee. The main document is gkepnormxormsimplifiedwriteup.txt. It contains references to the...

ProxyLogon

ProxyLogon ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability,...

CVE-2021-34473-Exchange-ProxyShell

python sendwebshellmail.py https://mail16.echod.com [email protected] Single retrieval python sendwebshellmail.py https://mail16.echod.com crack Batch read emails from mail.txt and attempt to obtain SID tokens python sendwebshellmail.py https://mail16.echod.com [email protected] send on...

WPAxFuzz

A full-fledged Wi-Fi Fuzzer Report Bug · Request Feature Table of Contents 1. About The Project 2. Fuzz Management and Control and Data Frames Requirements and Dependencies Description 3. Fuzz SAE-exchange 4. DoS attack module Description 5. Vulnerabilities 6. Related Work 7. License 8. Contact 9...

Proxyshell-Scanner

Proxyshell-Scanner nuclei scanner for Proxyshell RCE CVE-2021-34423,CVE-2021-34473,CVE-2021-31207 discovered by orange tsai in Pwn2Own, which affect microsoft exchange server. POC Resource https://blog.orange.tw/2021/08/proxylogon-a-new-attack-surface-on-ms-exchange-part-1.html...

fierce

Fierce Fierce is a DNS reconnaissance tool for locating non-contiguous IP space. Useful links: Domain Name System DNS Domain Names - Concepts and Facilities Domain Names - Implementation and Specification Threat Analysis of the Domain Name System DNS Name Servers NS State of Authority Record SOA...

CVE-2026-71300

CVE-2026-71300 — camel-atmosphere-websocket dispatch header injection Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the camel-atmosphere-websocket producer selects its WebSocket recipients from websocket. Exchange headers whose names fall outside the Camel namespac...

cve-2024-6387-poc

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...

PowerPriv

PowerPriv DESCRIPTION A powershell implementation of PrivExchange by @dirkjan original code found here: https://github.com/dirkjanm/PrivExchange/blob/master/privexchange.py Useful for environments on which you cannot run python-based applications, have user credentials, or do not want to drop fil...

CVE-2021-34473-scanner

CVE-2021-34473-scanner Scanner for CVE-2021-34473, ProxyShell, A Microsoft Exchange On-premise Vulnerability To test machines one by one, use scanner-CVE-2021-34473.bat: scanner-CVE-2021-34473.bat mail.exemple.fr To test multiple machines at once, use mass-scanner and add ip/FQDN to check, one by...

NetSpy

NetSpyC2 NetSpyC2 is a Python-based Command & Control C2 server created for educational purposes, security research, and controlled laboratory environments. The project demonstrates how encrypted client-server communication, session management, and secure file transfer can be implemented at the...

cve-2020-0688

cve-2020-0688 Usage: root@kitploit: usage: cve-2020-0688.py -h -s SERVER -u USER -p PASSWORD -c CMD optional arguments: -h, --help show this help message and exit -s SERVER, --server SERVER ECP Server URL Example: http://ip/owa -u USER, --user USER login account Example: domain\user -p PASSWORD,...

msmailprobe

msmailprobe Office 365 and Exchange Enumeration It is widely known that OWA Outlook Webapp is vulnerable to time-based user enumeration attacks. This tool leverages all known, and even some lesser-known services exposed by default Exchange installations to enumerate users. It also targets Office...

msmailprobe

msmailprobe Enumeración de Office 365 y Exchange Es ampliamente conocido que OWA Outlook Webapp es vulnerable a ataques de enumeración de usuarios basados en tiempo. Esta herramienta aprovecha todos los servicios conocidos, e incluso algunos menos conocidos, expuestos por instalaciones...

CVE-2021-26855_SSRF

CVE-2021-26855SSRF CVE-2021-26855 Exchange SSRF POC change the ceye.io tokne & Identifier : token = 'XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX' dnsurl = randomstr + '.XXXXXX.ceye.io' python CVE-2021-26855SSRF.py https://a.com...

msprobe

msprobe About Installing Usage Examples Coming Soon Acknowledgements About Finding all things on-prem Microsoft for password spraying and enumeration. The tool will used a list of common subdomains associated with your target apex domain to attempt to discover valid instances of on-prem Microsoft...

msprobe

msprobe Acerca de Instalación Uso Ejemplos Próximamente Agradecimientos Acerca de Encontrando todo lo relacionado con Microsoft on-premises para pulverización de contraseñas y enumeración. La herramienta utilizará una lista de subdominios comunes asociados con tu dominio apex de destino para...

CVE-2020-0688

Exploit and detect tools for CVE-2020-0688Microsoft Exchange default MachineKeySection deserialize vulnerability build root@kitploit: csc ExchangeCmd.cs csc ExchangeDetect.cs usage root@kitploit: ExchangeDetect root@kitploit: ExchangeCmd sub commands: exec args exec command arch get remote proces...

Exchange2domain

Exchange2domain Herramientas todo en uno de privexchange. Solo necesitas abrir el puerto del servidor web, por lo que no se requieren privilegios elevados. ¡Gran artículo! Abusando de Exchange: una sola llamada a la API te separa de Domain Admin. Requisitos Estas herramientas requieren impacket...

Exchange2domain

Exchange2domain All in One tools of privexchange . You only need to open the web server port, so no high privileges are required. Great writeup! Abusing Exchange: One API call away from Domain Admin. Requirements These tools require impacket. You can install it from pip with pip install impacket...