CVE-2021-26855_PoC

CVE-2021-26855PoC Meus primeiros payloads SSRF CVE-2021-26855 para Exchange Server 2019... Payload 1 root@kitploit: curl -i -s -k -X $'GET' -H $'Host: ' -H $'User-Agent: alex666' -H $'Connection: close' -b $'X-AnonResource=true;...

CVE-2022-41040-POC

CVE-2022-41040-POC CVE-2022-41040 - Server Side Request Forgery SSRF in Microsoft Exchange Server Sfruttamento manuale 1. Sostituisci COLLABHERE con il tuo dominio OOB - sed 's/COLLABHERE//g 2. Aggiungi i payload accanto agli URL che vuoi testare - echo http://target.com|unfurl format %s://%d/ 3...

Carnivore

Rilasciato come open source da NCC Group Plc - https://www.nccgroup.com/ Sviluppato da Chris Nevin, [email protected] https://www.github.com/nccgroup/carnivore Rilasciato sotto licenza AGPL https://www.github.com/nccgroup/carnivore/license Carnivore - V.1.0.4 Strumento di Valutazione Esterna...

CVE-2020-0688_EXP

CVE-2020-0688EXP CVE-2020-0688EXP payload ad attivazione automatica root@kitploit: python3 CVE-2020-0688EXP.py -h usage: CVE-2020-0688EXP.py -h -s SERVER -u USER -p PASSWORD -c CMD -e optional arguments: -h, --help show this help message and exit -s SERVER, --server ECP Server URL Example:...

ProxyShell

ProxyShell Installazione root@kitploit: git clone https://github.com/ktecv2000/ProxyShell cd ProxyShell virtualenv -p $which python3 venv source venv/bin/activate pip3 install pypsrp cp wsman.py venv/lib//site-packages/pypsrp/wsman.py Utilizzo root@kitploit: python3 exploit.py...

106362522

106362522 Riguardo al problema delle vulnerabilità di Exchange Server recentemente corrette da Microsoft dopo un attacco hacker, il team DEVCORE di Taiwan ha dichiarato di aver scoperto le vulnerabilità di sicurezza già il 5 gennaio e di averle segnalate a Microsoft, identificandole con i codici...

CVE-2020-0688-Exchange2010

المشكلة الرئيسية مع Exchange2010 هي أنه مبني على .net 2.0 وأن أدوات إلغاء التسلسل العامة generic deserialization gadgets لا تعمل. جميع الفضل يعود إلى zcgonvh و EazyLov3. هذا المشروع مجرد مزيج من: https://github.com/zcgonvh/CVE-2020-0688/ https://www.buaq.net/go-41757.html طريقة التنفيذ: قم بتجميع...

CVE-2020-0688-Scanner

CVE-2020-0688-Scanner Este script escaneia um IP/faixa/CIDR e exibe os Microsoft Exchange Servers e versões descobertas. O IP/faixa/CIDR especificado será escaneado com masscan na porta tcp/443. Após uma varredura bem-sucedida, ele tenta fazer HTTP GET "/owa/auth/logon.aspx" com curl para obter o...

Microsoft Exchange Server - Cross-Site Scripting

Microsoft Exchange Server, or OWA, is vulnerable to a cross-site scripting vulnerability in refurl parameter of frowny.asp. id: CVE-2021-31195 info: name: Microsoft Exchange Server - Cross-Site Scripting author: infosecsanyam severity: medium description: Microsoft Exchange Server, or OWA, is...

Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)

Microsoft Exchange Server contains a remote code execution caused by improper input validation in the server component, letting remote attackers execute arbitrary code, exploit requires network access to the server. id: CVE-2021-28480 info: name: Microsoft Exchange - Pre-Auth SSRF / ACL Bypass...

Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting

Microsoft Exchange Server is vulnerable to a spoofing vulnerability. Be aware this CVE ID is unique from CVE-2021-42305. id: CVE-2021-41349 info: name: Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting author: rootxharsh,iamnoooob severity: medium description: Microsoft Exchange...

Microsoft Exchange - Authentication Bypass

Microsoft Exchange Server Information Disclosure Vulnerability. This vulnerability enables an attacker to bypass authentication and gain access to the Exchange Server's internal. id: CVE-2021-33766 info: name: Microsoft Exchange - Authentication Bypass author: daffainfo severity: high description...

Microsoft OWA Exchange Server 2003 - 'redir.asp' Open Redirection

Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access OWA for Exchange Server 2003 SP2 aka build 6.5.7638 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the URL parameter. id: CVE-2008-1547 info: name:...

Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)

Microsoft Exchange Server contains a remote code execution caused by improper input validation in the server component, letting remote attackers execute arbitrary code, exploit requires network access to the server. id: CVE-2021-28481 info: name: Microsoft Exchange - Pre-Auth SSRF / ACL Bypass...

CVE-2025-32433.py

CVE-2025-32433.py Questo PoC Python simula i flussi di messaggi SSH, inclusi lo scambio di chiavi, l'apertura del canale e le richieste di comando, per analizzare il comportamento del server. Pensato per test di laboratorio controllati, dimostra la gestione del protocollo, l'elaborazione dei...

CVE-2021-34473-NMAP-SCANNER

CVE-2021-34473-NMAP-SCANNER Uno scanner di massa per la vulnerabilità CVE-2021-34473 di Microsoft Exchange Windows Comandi root@kitploit: nmap -iR 500000 -n -p 443 --script cve202134473.nse scan500k.txt nmap website.com -n -p 443 --script cve202134473.nse Esempio root@kitploit: Starting Nmap 7.92...

0dayex-checker

0dayex-checker Zero-Day-Checker für Microsoft Exchange Server Virtual-Patching-Checker...

TokenMan

Suite per token di accesso e refresh. Token Man è uno strumento per supportare attività di post-exploitation utilizzando token di accesso e/o refresh AAD. Indice Utilizzo Comandi Fetch Search Swap Mappa degli ID client applicazione FOCI AZ OAuth Usage root@kitploit: usage: tokenman.py -h...

ProxyNotShell-PoC

PoC funzionante per CVE-2022-41040 e CVE-2022-41082 A.K.A ProxyNotShell Requisito: pip install requestsntlm2 requests Utilizzo: root@kitploit: python pocaug3.py Credenziali: Script PoC di ProxyShell da: https://blog.viettelcybersecurity.com/pwn2own-2021-microsoft-exchange-exploit-chain/ Post del...

SharpExchange

SharpExchange Questo POC da riga di comando mostra come C può essere utilizzato per interagire con Microsoft Exchange EWS, dimostrando che può essere fatto con strumenti diversi da PowerShell. Sì, è un semplice POC per mostrare come si potrebbe fare. Non è perfetto al 100%. Se vuoi mettere in...