-h string 必填，目标地址或域名
-U string 选填，需要枚举的用户列表
-d 选填，下载邮件
-l 选填，列出邮件列表
-n string 选填，需要指定 FQND 事填写
-t string 选填，请求延迟时间 (default "1")
-u string 选填，指定目标 (default "administrator")
CVE 2021 26855 - Go
https://github.com/charlottelatest/CVE-2021-26855 76CVE 2021 26855 - Go Similar Projects List
Exprolog - Python
20
ExProlog ProxyLogon Full Exploit Chain PoC (CVE-2021–26855, CVE-2021–26857, CVE-2021–26858, CVE-2021–27065) Usage: exprolog.py [OPTIONS]
ExProlog -
PocList -
265
Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile/F5-BIG-IP-CVE-2021-22986/Sonicwall-SSL-VPN-RCE/GitLab-Graphql-CNVD-2021-14193. 关于POC 这里会把作者在各种环境中遇到的繁琐漏洞简化为POC工具,以便在后续中轻松发现与利用
CVE 2021 26855 - Go
33
CVE-2021-26855 exp. CVE-2021-26855 CVE-2021-26855 ssrf 简单利用 golang 练习 影响版本 Exchange Server 2013 小于 CU23 Exchange Server 2016 小于 CU18 Exchange Server 2019 小于 CU7 利用条件 该漏洞不
ProxyLogon - Python
33
ProxyLogon For Python3 ProxyLogon(CVE-2021-26855+CVE-2021-27065) Exchange Server RCE(SSRF->GetWebShell) usage:
python ProxyLogon.py --host=exchang
REALITY SMASHER - Go
14
vRealize RCE + Privesc (CVE-2021-21975, CVE-2021-21983, CVE-0DAY-). REALITY_SMASHER vRealize RCE + Privesc (CVE-2021-21975, CVE-2021-21983, CVE-0DAY-?????) "As easy to stop as it is to comprehend." What is it? "Reality
SimplesApachePathTraversal - Python
26
Tool check: CVE-2021-41773, CVE-2021-42013, CVE-2020-17519. SimplesApachePathTraversal Simples Apache Path Traversal It's a simple tool for test vulnerability Apache Path Traversal https://blog.mrcl0wn.com/2021
Proxylogscan - Go
68
A fast tool to mass scan for a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin (CVE-2021-26855). proxylogscan This tool to mass scan for a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and imperson
CVE 2021 26855 - Python
26
CVE-2021-26855 SSRF Exchange Server. CVE-2021-26855 Brute Force Email Exchange Server For Education and Research Tested on: Windows - Python 3 /Linux - Python 3 Timeline: Monday, March 8,
CVE 2021 26855 - Python
32
CVE-2021-26855 PoC of proxylogon chain SSRF(CVE-2021-26855) to write file by testanull, censored by github Why does github remove this exploit because
CVE 2020 0787 EXP ALL WINDOWS VERSION - C++
363
CVE-2020-0787-EXP-ALL-WINDOWS-VERSION,Support ALL Windows Version
PrintNightmare - Python
24
PrintNightmare Python implementation for PrintNightmare (CVE-2021-1675 / CVE-2021-34527) using standard Impacket. Installtion $ pip3 install impacket
DahuaLoginBypass - JavaScript
13
DahuaLoginBypass Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication. Insta
PrintNightmare - Python
75
PrintNightmare Python implementation for PrintNightmare (CVE-2021-1675 / CVE-2021-34527) using standard Impacket. Installtion $ pip3 install impacket
Sam the admin - Python
25
Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user Known issues it will not work outside kali , i will update it
NoPac - C#
105
noPac CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter. Yet another low effort domain user to domain admin exploit. If a Domain Controller is vulnera