CVE-2021-34473 PoC — Microsoft Exchange Server Remote Code Execution Vulnerability

Source

https://github.com/cyberheartmi9/Proxyshell-Scanner

Associated Vulnerability

Title:Microsoft Exchange Server Remote Code Execution Vulnerability (CVE-2021-34473)
Description:Microsoft Exchange Server Remote Code Execution Vulnerability

Description

nuclei scanner for proxyshell ( CVE-2021-34473 )

Readme

# Proxyshell-Scanner
nuclei scanner for Proxyshell RCE (CVE-2021-34423,CVE-2021-34473,CVE-2021-31207) discovered by orange tsai in Pwn2Own, which affect microsoft exchange server.


# POC

![alt text](https://github.com/cyberheartmi9/Proxyshell-Scanner/blob/main/screenshot/proxyshell.PNG)


# Resource
<br>https://blog.orange.tw/2021/08/proxylogon-a-new-attack-surface-on-ms-exchange-part-1.html
<br>https://blog.orange.tw/2021/08/proxyoracle-a-new-attack-surface-on-ms-exchange-part-2.html
<br>https://peterjson.medium.com/reproducing-the-proxyshell-pwn2own-exploit-49743a4ea9a1

File Snapshot


 [4.0K]  /data/pocs/216f8f18b3bcda66c90cc75eb9edd1e7e0ed0f51
├── [4.0K]  ProxyNotShell
│   └── [2.2K]  CVE-2022-41040.py
├── [1.1K]  proxyshell.yaml
├── [ 581]  README.md
├── [4.0K]  screenshot
│   ├── [ 37K]  proxyshell.PNG
│   └── [   1]  text
└── [ 352]  shodan-query.py

2 directories, 6 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!