Exploits

analytics ProxyLogo Mail exchange RCE

Microsoft Exchange Proxylogon Exploit Chain EXP分析

Microsoft Exchange Proxylogon Exploit Chain EXP分析

ProxyLogon(CVE-2021-26855+CVE-2021-27065) Exchange Server RCE(SSRF->GetWebShell)

CVE-2021-26855 proxyLogon metasploit exploit script

Chaining CVE-2021-26855 and CVE-2021-26857 to exploit Microsoft Exchange

ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability, CVE-2021-27065, to get code execution.

patched to work

CVE-2021-26855 & CVE-2021-27065

RCE exploit for ProxyLogon vulnerability in Microsoft Exchange

CVE-2021-26855: PoC (Not a HoneyPoC for once!)

RCE exploit for Microsoft Exchange Server (CVE-2021-26855).

Scanner and PoC for CVE-2021-26855

CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065

PoC of proxylogon chain SSRF(CVE-2021-26855) to write file by testanull, censored by github

CVE-2021-26855, also known as Proxylogon, is a server-side request forgery (SSRF) vulnerability in Exchange that allows an attacker to send arbitrary HTTP requests and authenticate as the Exchange server.

proxylogon exploit - CVE-2021-26857

PoC exploit code for CVE-2021-26855