91 matches found
CVE-2021-34473
CVE-2021-34473 CVE-2021-34473 Microsoft Exchange Server リモートコード実行の脆弱性 ProxyShellエクスプロイトの再現 https://y4y.space/2021/08/12/my-steps-of-reproducing-proxyshell/ これはサイバー兵器ではなく、実験的なPoCです...
ProxyShell
ProxyShell インストール git clone https://github.com/ktecv2000/ProxyShell cd ProxyShell virtualenv -p $which python3 venv source venv/bin/activate pip3 install pypsrp cp wsman.py venv/lib//site-packages/pypsrp/wsman.py 使用方法 python3 exploit.py...
proxyshell
ProxyShell Microsoft Exchange CVE-2021-34473、CVE-2021-34523、CVE-2021-31207 の概念実証エクスプロイト 詳細 背景情報とコンテキストについては、Horizon3 による調査の詳細を記したブログ記事をお読みください： https://www.horizon3.ai/news/blog/proxyshell 特長 メールアドレスを指定する必要はありません Active Directory からメールアドレスを列挙しようとします Active Directory から LegacyDN を列挙しようとします 組み込みメール...
CVE-2021-34473-scanner
CVE-2021-34473-scanner Scanner for CVE-2021-34473, ProxyShell, A Microsoft Exchange On-premise Vulnerability To test machines one by one, use scanner-CVE-2021-34473.bat: scanner-CVE-2021-34473.bat mail.exemple.fr To test multiple machines at once, use mass-scanner and add ip/FQDN to check, one by...
Proxyshell-Scanner
Proxyshell-Scanner nuclei scanner for Proxyshell RCE CVE-2021-34423,CVE-2021-34473,CVE-2021-31207 discovered by orange tsai in Pwn2Own, which affect microsoft exchange server. POC Resource https://blog.orange.tw/2021/08/proxylogon-a-new-attack-surface-on-ms-exchange-part-1.html...
ProxyVulns
ProxyVulns ProxyLogon Usage: python3 26855.py 1.1.1.1 ProxyOracle Once a victim clicks this link, evil.com will receive the cookies...
CVE-2021-34473-Exchange-ProxyShell
python sendwebshellmail.py https://mail16.echod.com [email protected] 単一取得 python sendwebshellmail.py https://mail16.echod.com crack mail.txt からメールを一括で読み取り、SID トークンの取得を試みます python sendwebshellmail.py https://mail16.echod.com [email protected] send webshell の下書きメールのみ送信 python...
ProxyShell_POC
ProxyShellPOC ProxyShellCVE-2021-34523,CVE-2021-34473,CVE-2021-31207 をスキャンするためのPoC 使用方法: python3 Proxyshell.py ip...
ProxyNotShell-PoC
CVE-2022-41040 および CVE-2022-41082 用の動作する PoC（別名 ProxyNotShell） 要件: pip install requestsntlm2 requests 使用方法: python pocaug3.py クレジット: ProxyShell PoC スクリプトの出典: https://blog.viettelcybersecurity.com/pwn2own-2021-microsoft-exchange-exploit-chain/ Gtsc のブログ記事...
ProxyShell-CVE-2021-34473.py
ProxyShell-CVE-2021-34473 ProxyShellをチェックするためのシンプルなスクリプト...
CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065
CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065 CTT-enhanced version of the Microsoft Exchange Server SSRF to RCE exploit ProxyShell/ProxyLogon, another CVSS 10.0 critical vulnerability that affected hundreds of thousands of organizations...
Exploit for Unrestricted Upload of File with Dangerous Type in Microsoft
ProxyHell Modernized ProxyShell Exploit CVE-20...
ProxyVulns
ProxyVulns ProxyLogon Usage: python3 26855.py 1.1.1.1 ProxyOracle url Once a victim clicks this link, evil.com will receive the cookies...
BlackByte blends tried-and-true tradecraft with newly disclosed vulnerabilities to support ongoing attacks
The BlackByte ransomware group continues to leverage tactics, techniques and procedures TTPs that have formed the foundation of its tradecraft since its inception, continuously iterating its use of vulnerable drivers to bypass security protections and deploying a self-propagating, wormable...
MS Exchange Server Flaws Exploited to Deploy Keylogger in Targeted Attacks
An unknown threat actor is exploiting known security flaws in Microsoft Exchange Server to deploy a keylogger malware in attacks targeting entities in Africa and the Middle East. Russian cybersecurity firm Positive Technologies said it identified over 30 victims spanning government agencies, bank...
Free Decryptor Released for Black Basta and Babuk's Tortilla Ransomware Victims
A decryptor for the Tortilla variant of the Babuk ransomware has been released by Cisco Talos, allowing victims targeted by the malware to regain access to their files. The cybersecurity firm said the threat intelligence it shared with Dutch law enforcement authorities made it possible to arrest...
Major Cybersecurity Agencies Collaborate to Unveil 2022's Most Exploited Vulnerabilities
A four-year-old critical security flaw impacting Fortinet FortiOS SSL has emerged as one of the most routinely and frequently exploited vulnerabilities in 2022. "In 2022, malicious cyber actors exploited older software vulnerabilities more frequently than recently disclosed vulnerabilities and...
The five-day job: A BlackByte ransomware intrusion case study
As ransomware attacks continue to grow in number and sophistication, threat actors can quickly impact business operations if organizations are not well prepared. In a recent investigation by Microsoft Incident Response previously known as Microsoft Detection and Response Team – DART of an...
Microsoft Urges Customers to Secure On-Premises Exchange Servers
Microsoft is urging customers to keep their Exchange servers updated as well as take steps to bolster the environment, such as enabling Windows Extended Protection and configuring certificate-based signing of PowerShell serialization payloads. "Attackers looking to exploit unpatched Exchange...