CVE-2021-26855 PoC — Microsoft Exchange Server Remote Code Execution Vulnerability

Source

Associated Vulnerability

Description

ProxyLogon(CVE-2021-26855+CVE-2021-27065) Exchange Server RCE(SSRF->GetWebShell)

Readme

# ProxyLogon For Python3
ProxyLogon(CVE-2021-26855+CVE-2021-27065) Exchange Server RCE(SSRF->GetWebShell)
```python
usage:
    python ProxyLogon.py --host=exchange.com --mail=admin@exchange.com
    python ProxyLogon.py --host=exchange.com --mails=./mails.txt
args:
    --host: target's address.
    --mail: exists user's mail.
    --mails: mails file.
```

![](https://github.com/p0wershe11/ProxyLogon/blob/main/gif.gif)

File Snapshot

 [4.0K]  /data/pocs/0e097e949d3b7662cecb2bd99c9ffa98e662e1d4
├── [2.8M]  gif.gif
├── [ 12K]  ProxyLogon.py
└── [ 421]  README.md

0 directories, 3 files

Remarks