Exploits

Chaining CVE-2021-26855 and CVE-2021-26857 to exploit Microsoft Exchange

ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability, CVE-2021-27065, to get code execution.

patched to work

CVE-2021-26855 & CVE-2021-27065

RCE exploit for ProxyLogon vulnerability in Microsoft Exchange

CVE-2021-26855: PoC (Not a HoneyPoC for once!)

RCE exploit for Microsoft Exchange Server (CVE-2021-26855).

Scanner and PoC for CVE-2021-26855

CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065

PoC of proxylogon chain SSRF(CVE-2021-26855) to write file by testanull, censored by github

CVE-2021-26855, also known as Proxylogon, is a server-side request forgery (SSRF) vulnerability in Exchange that allows an attacker to send arbitrary HTTP requests and authenticate as the Exchange server.

proxylogon exploit - CVE-2021-26857

PoC exploit code for CVE-2021-26855

CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065

This script test the CVE-2021-26855 vulnerability on Exchange Server.

CVE-­2021­-1732 Microsoft Windows 10 本地提权漏 研究及Poc/Exploit开发

A fast tool to mass scan for a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin (CVE-2021-26855).

NOTICE This repository contains the public FTC SDK for the SKYSTONE (2019-2020) competition season. If you are looking for the current season's FTC SDK software, please visit the new and permanent home of the public FTC SDK: FtcRobotController repository Welcome! This GitHub repository contains the source code that is used to build an Android app to control a FIRST Tech Challenge competition robot. To use this SDK, download/clone the entire project to your local computer. Getting Started If y