MS Exchange ProxyLogon

Intro

ProxyLogon: Zero-Day Exploits In Microsoft Exchange Server

ProxyLogonProxyLogon

Reproducing the Vulnerability Chain

Hunting Down MS Exchange Attacks. Part 1. ProxyLogon (CVE-2021-26855, 26858, 27065, 26857)

Metasploit Module

exploit/windows/http/exchange_proxylogon_rce

PoC Exploit

ProxyLogon Full Exploit Chain PoC

GitHub - herwonowr/exprolog: ProxyLogon Full Exploit Chain PoC (CVE-2021–26855, CVE-2021–26857, CVE-2021–26858, CVE-2021–27065)GitHub

Proof-of-concept exploit for CVE-2021-26855 and CVE-2021-27065

GitHub - praetorian-inc/proxylogon-exploit: Proof-of-concept exploit for CVE-2021-26855 and CVE-2021-27065. Unauthenticated RCE in Exchange.GitHub