menu arrow_back 湛蓝安全空间 |狂野湛蓝,暴躁每天 chevron_right All_wiki chevron_right Middleware-Vulnerability-detection-master chevron_right Exchange chevron_right CVE-2020-0688 Exchange Rce chevron_right exp1
  • home 首页
  • brightness_4 暗黑模式
  • cloud
    xLIYhHS7e34ez7Ma
    cloud
    湛蓝安全
    code
    Github
    lightbulb_outline README

    Exploit and detect tools for CVE-2020-0688(Microsoft Exchange default MachineKeySection deserialize vulnerability)

    build

    csc ExchangeCmd.cs
    csc ExchangeDetect.cs

    usage

    ExchangeDetect <target> <user> <pass>

    ExchangeCmd <target> <user> <pass>
    sub commands:
        exec <cmd> [args]
          exec command
    
        arch
          get remote process architecture(for shellcode)
    
        shellcode <shellcode.bin>
          run shellcode
    
        exit
          exit program

    for more information, read writeup.pdf(in chinese).