mirror/PoC-in-GitHub
1
0
Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2025-01-16 12:52:22 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions
PoC-in-GitHub/2020/CVE-2020-0688.json

462 lines
18 KiB
JSON
Raw Normal View History

Auto Update 2020/12/31 06:09:58
2020-12-30 22:09:58 +01:00
[
Auto Update 2021/06/29 12:11:17
2021-06-29 05:11:17 +02:00
{
"id": 243126851,
"name": "cve-2020-0688",
"full_name": "random-robbie\/cve-2020-0688",
"owner": {
"login": "random-robbie",
"id": 4902869,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4902869?v=4",
"html_url": "https:\/\/github.com\/random-robbie"
},
"html_url": "https:\/\/github.com\/random-robbie\/cve-2020-0688",
"description": "cve-2020-0688",
"fork": false,
"created_at": "2020-02-25T23:44:16Z",
Auto Update 2021/06/29 18:12:46
2021-06-29 11:12:46 +02:00
"updated_at": "2021-06-29T06:26:22Z",
Auto Update 2021/06/29 12:11:17
2021-06-29 05:11:17 +02:00
"pushed_at": "2020-02-26T00:58:39Z",
Auto Update 2021/06/29 18:12:46
2021-06-29 11:12:46 +02:00
"stargazers_count": 156,
"watchers_count": 156,
Auto Update 2021/06/29 12:11:17
2021-06-29 05:11:17 +02:00
"forks_count": 47,
"forks": 47,
Auto Update 2021/06/29 18:12:46
2021-06-29 11:12:46 +02:00
"watchers": 156,
Auto Update 2021/06/29 12:11:17
2021-06-29 05:11:17 +02:00
"score": 0
},
{
"id": 243257176,
"name": "CVE-2020-0688",
"full_name": "Jumbo-WJB\/CVE-2020-0688",
"owner": {
"login": "Jumbo-WJB",
"id": 7954518,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7954518?v=4",
"html_url": "https:\/\/github.com\/Jumbo-WJB"
},
"html_url": "https:\/\/github.com\/Jumbo-WJB\/CVE-2020-0688",
"description": "CVE-2020-0688 - Exchange",
"fork": false,
"created_at": "2020-02-26T12:28:11Z",
"updated_at": "2021-06-23T04:39:00Z",
"pushed_at": "2020-02-27T03:50:07Z",
"stargazers_count": 58,
"watchers_count": 58,
"forks_count": 23,
"forks": 23,
"watchers": 58,
"score": 0
},
Auto Update 2021/04/05 12:11:01
2021-04-05 05:11:01 +02:00
{
"id": 243416592,
"name": "cve-2020-0688",
"full_name": "Ridter\/cve-2020-0688",
"owner": {
"login": "Ridter",
"id": 6007471,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/6007471?v=4",
"html_url": "https:\/\/github.com\/Ridter"
},
"html_url": "https:\/\/github.com\/Ridter\/cve-2020-0688",
"description": "cve-2020-0688",
"fork": false,
"created_at": "2020-02-27T02:54:27Z",
Auto Update 2021/06/26 00:11:33
2021-06-25 17:11:33 +02:00
"updated_at": "2021-06-25T11:16:17Z",
Auto Update 2021/04/05 12:11:01
2021-04-05 05:11:01 +02:00
"pushed_at": "2020-06-19T09:28:15Z",
Auto Update 2021/06/26 00:11:33
2021-06-25 17:11:33 +02:00
"stargazers_count": 269,
"watchers_count": 269,
Auto Update 2021/06/17 12:11:27
2021-06-17 05:11:27 +02:00
"forks_count": 91,
"forks": 91,
Auto Update 2021/06/26 00:11:33
2021-06-25 17:11:33 +02:00
"watchers": 269,
Auto Update 2021/04/05 12:11:01
2021-04-05 05:11:01 +02:00
"score": 0
},
Auto Update 2021/06/29 12:11:17
2021-06-29 05:11:17 +02:00
{
"id": 243531424,
"name": "CVE-2020-0688_EXP",
"full_name": "Yt1g3r\/CVE-2020-0688_EXP",
"owner": {
"login": "Yt1g3r",
"id": 12625147,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/12625147?v=4",
"html_url": "https:\/\/github.com\/Yt1g3r"
},
"html_url": "https:\/\/github.com\/Yt1g3r\/CVE-2020-0688_EXP",
"description": "CVE-2020-0688_EXP Auto trigger payload & encrypt method",
"fork": false,
"created_at": "2020-02-27T13:53:46Z",
Auto Update 2021/07/08 18:11:46
2021-07-08 11:11:46 +02:00
"updated_at": "2021-07-08T03:53:34Z",
Auto Update 2021/06/29 12:11:17
2021-06-29 05:11:17 +02:00
"pushed_at": "2020-02-27T15:57:53Z",
Auto Update 2021/07/08 18:11:46
2021-07-08 11:11:46 +02:00
"stargazers_count": 139,
"watchers_count": 139,
Auto Update 2021/06/29 12:11:17
2021-06-29 05:11:17 +02:00
"forks_count": 60,
"forks": 60,
Auto Update 2021/07/08 18:11:46
2021-07-08 11:11:46 +02:00
"watchers": 139,
Auto Update 2021/06/29 12:11:17
2021-06-29 05:11:17 +02:00
"score": 0
},
Auto Update 2020/12/31 06:09:58
2020-12-30 22:09:58 +01:00
{
"id": 243640997,
"name": "CVE-2020-0688",
"full_name": "righter83\/CVE-2020-0688",
"owner": {
"login": "righter83",
"id": 12727740,
Auto Update 2021/01/22 00:10:20
2021-01-21 16:10:20 +01:00
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/12727740?v=4",
Auto Update 2020/12/31 06:09:58
2020-12-30 22:09:58 +01:00
"html_url": "https:\/\/github.com\/righter83"
},
"html_url": "https:\/\/github.com\/righter83\/CVE-2020-0688",
"description": "Exchange Scanner CVE-2020-0688",
"fork": false,
"created_at": "2020-02-27T23:55:04Z",
Auto Update 2021/03/12 06:09:25
2021-03-11 22:09:25 +01:00
"updated_at": "2021-03-11T15:57:36Z",
Auto Update 2020/12/31 06:09:58
2020-12-30 22:09:58 +01:00
"pushed_at": "2020-11-06T13:33:30Z",
Auto Update 2021/03/12 06:09:25
2021-03-11 22:09:25 +01:00
"stargazers_count": 1,
"watchers_count": 1,
Auto Update 2020/12/31 06:09:58
2020-12-30 22:09:58 +01:00
"forks_count": 2,
"forks": 2,
Auto Update 2021/03/12 06:09:25
2021-03-11 22:09:25 +01:00
"watchers": 1,
Auto Update 2020/12/31 06:09:58
2020-12-30 22:09:58 +01:00
"score": 0
},
Auto Update 2021/06/29 12:11:17
2021-06-29 05:11:17 +02:00
{
"id": 243672879,
"name": "cve-2020-0688",
"full_name": "truongtn\/cve-2020-0688",
"owner": {
"login": "truongtn",
"id": 11813006,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/11813006?v=4",
"html_url": "https:\/\/github.com\/truongtn"
},
"html_url": "https:\/\/github.com\/truongtn\/cve-2020-0688",
"description": "I made this script for conducting CVE-2020-0688 more rapidly. It helps to improve checking the vuln, reducing hugely steps for that",
"fork": false,
"created_at": "2020-02-28T03:47:40Z",
"updated_at": "2020-02-28T09:39:14Z",
"pushed_at": "2020-02-28T04:04:54Z",
"stargazers_count": 1,
"watchers_count": 1,
"forks_count": 0,
"forks": 0,
"watchers": 1,
"score": 0
},
Auto Update 2021/01/31 12:09:38
2021-01-31 04:09:38 +01:00
{
"id": 243801603,
"name": "CVE-2020-0688-Scanner",
"full_name": "onSec-fr\/CVE-2020-0688-Scanner",
"owner": {
"login": "onSec-fr",
"id": 59887731,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59887731?v=4",
"html_url": "https:\/\/github.com\/onSec-fr"
},
"html_url": "https:\/\/github.com\/onSec-fr\/CVE-2020-0688-Scanner",
"description": "Quick tool for checking CVE-2020-0688 on multiple hosts with a non-intrusive method.",
"fork": false,
"created_at": "2020-02-28T16:04:30Z",
Auto Update 2021/06/01 18:11:51
2021-06-01 11:11:51 +02:00
"updated_at": "2021-06-01T07:36:56Z",
"pushed_at": "2021-06-01T07:36:53Z",
Auto Update 2021/03/12 06:09:25
2021-03-11 22:09:25 +01:00
"stargazers_count": 35,
"watchers_count": 35,
Auto Update 2021/02/01 18:10:34
2021-02-01 10:10:34 +01:00
"forks_count": 12,
"forks": 12,
Auto Update 2021/03/12 06:09:25
2021-03-11 22:09:25 +01:00
"watchers": 35,
Auto Update 2021/01/31 12:09:38
2021-01-31 04:09:38 +01:00
"score": 0
},
Auto Update 2021/06/29 12:11:17
2021-06-29 05:11:17 +02:00
{
"id": 243813543,
"name": "CVE-2020-0688",
"full_name": "youncyb\/CVE-2020-0688",
"owner": {
"login": "youncyb",
"id": 33374470,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/33374470?v=4",
"html_url": "https:\/\/github.com\/youncyb"
},
"html_url": "https:\/\/github.com\/youncyb\/CVE-2020-0688",
"description": "CVE-2020-0688",
"fork": false,
"created_at": "2020-02-28T17:03:53Z",
"updated_at": "2021-03-13T00:34:36Z",
"pushed_at": "2020-02-28T17:07:15Z",
"stargazers_count": 9,
"watchers_count": 9,
"forks_count": 2,
"forks": 2,
"watchers": 9,
"score": 0
},
{
"id": 244149446,
"name": "CVE-2020-0688",
"full_name": "zcgonvh\/CVE-2020-0688",
"owner": {
"login": "zcgonvh",
"id": 25787677,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25787677?v=4",
"html_url": "https:\/\/github.com\/zcgonvh"
},
"html_url": "https:\/\/github.com\/zcgonvh\/CVE-2020-0688",
"description": "Exploit and detect tools for CVE-2020-0688",
"fork": false,
"created_at": "2020-03-01T12:57:32Z",
"updated_at": "2021-06-15T02:56:02Z",
"pushed_at": "2020-03-21T05:44:48Z",
"stargazers_count": 289,
"watchers_count": 289,
"forks_count": 69,
"forks": 69,
"watchers": 289,
"score": 0
},
{
"id": 245013193,
"name": "PSForgot2kEyXCHANGE",
"full_name": "justin-p\/PSForgot2kEyXCHANGE",
"owner": {
"login": "justin-p",
"id": 8249280,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8249280?v=4",
"html_url": "https:\/\/github.com\/justin-p"
},
"html_url": "https:\/\/github.com\/justin-p\/PSForgot2kEyXCHANGE",
"description": "PoC for Forgot2kEyXCHANGE (CVE-2020-0688) written in PowerShell",
"fork": false,
"created_at": "2020-03-04T22:02:30Z",
"updated_at": "2021-04-05T20:29:00Z",
"pushed_at": "2020-03-05T08:02:57Z",
"stargazers_count": 4,
"watchers_count": 4,
"forks_count": 5,
"forks": 5,
"watchers": 4,
"score": 0
},
{
"id": 248554405,
"name": "CVE-2020-0688",
"full_name": "cert-lv\/CVE-2020-0688",
"owner": {
"login": "cert-lv",
"id": 22764485,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/22764485?v=4",
"html_url": "https:\/\/github.com\/cert-lv"
},
"html_url": "https:\/\/github.com\/cert-lv\/CVE-2020-0688",
"description": "Vulnerability scanner for CVE-2020-0688",
"fork": false,
"created_at": "2020-03-19T16:39:56Z",
"updated_at": "2021-03-11T15:58:15Z",
"pushed_at": "2020-03-19T16:41:39Z",
"stargazers_count": 6,
"watchers_count": 6,
"forks_count": 2,
"forks": 2,
"watchers": 6,
"score": 0
},
Auto Update 2021/04/05 12:11:01
2021-04-05 05:11:01 +02:00
{
"id": 251646716,
"name": "CVE-2020-0688",
"full_name": "ravinacademy\/CVE-2020-0688",
"owner": {
"login": "ravinacademy",
"id": 62107070,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62107070?v=4",
"html_url": "https:\/\/github.com\/ravinacademy"
},
"html_url": "https:\/\/github.com\/ravinacademy\/CVE-2020-0688",
"description": "Exploitation Script for CVE-2020-0688 \"Microsoft Exchange default MachineKeySection deserialize vulnerability\"",
"fork": false,
"created_at": "2020-03-31T15:29:52Z",
"updated_at": "2021-02-07T08:36:06Z",
"pushed_at": "2020-04-01T06:57:50Z",
"stargazers_count": 12,
"watchers_count": 12,
"forks_count": 9,
"forks": 9,
"watchers": 12,
"score": 0
},
{
"id": 253240950,
"name": "Exploit_CVE-2020-0688",
"full_name": "mahyarx\/Exploit_CVE-2020-0688",
"owner": {
"login": "mahyarx",
"id": 7817627,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7817627?v=4",
"html_url": "https:\/\/github.com\/mahyarx"
},
"html_url": "https:\/\/github.com\/mahyarx\/Exploit_CVE-2020-0688",
"description": "CVE-2020-0688 \"Microsoft Exchange default MachineKeySection deserialize vulnerability\" ",
"fork": false,
"created_at": "2020-04-05T13:26:03Z",
Auto Update 2021/06/30 06:12:38
2021-06-29 23:12:38 +02:00
"updated_at": "2021-06-29T18:02:11Z",
Auto Update 2021/04/05 12:11:01
2021-04-05 05:11:01 +02:00
"pushed_at": "2020-04-05T13:33:10Z",
Auto Update 2021/06/30 06:12:38
2021-06-29 23:12:38 +02:00
"stargazers_count": 2,
"watchers_count": 2,
"forks_count": 2,
"forks": 2,
"watchers": 2,
Auto Update 2021/04/05 12:11:01
2021-04-05 05:11:01 +02:00
"score": 0
},
{
"id": 257824792,
"name": "CVE-2020-0688",
"full_name": "ktpdpro\/CVE-2020-0688",
"owner": {
"login": "ktpdpro",
"id": 17905484,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/17905484?v=4",
"html_url": "https:\/\/github.com\/ktpdpro"
},
"html_url": "https:\/\/github.com\/ktpdpro\/CVE-2020-0688",
"description": "PoC RCE Reverse Shell for CVE-2020-0688",
"fork": false,
"created_at": "2020-04-22T07:28:32Z",
Auto Update 2021/07/04 18:11:22
2021-07-04 11:11:22 +02:00
"updated_at": "2021-07-04T07:09:28Z",
Auto Update 2021/04/05 12:11:01
2021-04-05 05:11:01 +02:00
"pushed_at": "2020-04-22T01:09:27Z",
Auto Update 2021/07/04 18:11:22
2021-07-04 11:11:22 +02:00
"stargazers_count": 2,
"watchers_count": 2,
Auto Update 2021/04/05 12:11:01
2021-04-05 05:11:01 +02:00
"forks_count": 1,
"forks": 1,
Auto Update 2021/07/04 18:11:22
2021-07-04 11:11:22 +02:00
"watchers": 2,
Auto Update 2021/04/05 12:11:01
2021-04-05 05:11:01 +02:00
"score": 0
},
Auto Update 2021/02/21 06:08:14
2021-02-20 22:08:14 +01:00
{
"id": 271748338,
"name": "cve-2020-0688-webshell-upload-technique",
"full_name": "w4fz5uck5\/cve-2020-0688-webshell-upload-technique",
"owner": {
"login": "w4fz5uck5",
"id": 32375656,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32375656?v=4",
"html_url": "https:\/\/github.com\/w4fz5uck5"
},
"html_url": "https:\/\/github.com\/w4fz5uck5\/cve-2020-0688-webshell-upload-technique",
"description": "cve-2020-0688 UNIVERSAL Python implementation utilizing ASPX webshell for command output",
"fork": false,
"created_at": "2020-06-12T08:28:35Z",
Auto Update 2021/07/04 18:11:22
2021-07-04 11:11:22 +02:00
"updated_at": "2021-07-04T07:09:59Z",
Auto Update 2021/02/21 06:08:14
2021-02-20 22:08:14 +01:00
"pushed_at": "2020-07-16T10:42:27Z",
Auto Update 2021/07/04 18:11:22
2021-07-04 11:11:22 +02:00
"stargazers_count": 15,
"watchers_count": 15,
Auto Update 2021/02/21 06:08:14
2021-02-20 22:08:14 +01:00
"forks_count": 8,
"forks": 8,
Auto Update 2021/07/04 18:11:22
2021-07-04 11:11:22 +02:00
"watchers": 15,
Auto Update 2021/02/21 06:08:14
2021-02-20 22:08:14 +01:00
"score": 0
},
Auto Update 2021/05/16 12:15:46
2021-05-16 05:15:46 +02:00
{
"id": 288177224,
"name": "CVE-2020-0688",
"full_name": "murataydemir\/CVE-2020-0688",
"owner": {
"login": "murataydemir",
"id": 16391655,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16391655?v=4",
"html_url": "https:\/\/github.com\/murataydemir"
},
"html_url": "https:\/\/github.com\/murataydemir\/CVE-2020-0688",
"description": "[CVE-2020-0688] Microsoft Exchange Server Fixed Cryptographic Key Remote Code Execution (RCE)",
"fork": false,
"created_at": "2020-08-17T12:41:51Z",
"updated_at": "2021-03-13T00:32:52Z",
"pushed_at": "2020-08-29T21:00:56Z",
"stargazers_count": 3,
"watchers_count": 3,
"forks_count": 1,
"forks": 1,
"watchers": 3,
"score": 0
},
Auto Update 2021/05/15 12:11:14
2021-05-15 05:11:14 +02:00
{
"id": 306497480,
"name": "ecp_slap",
"full_name": "zyn3rgy\/ecp_slap",
"owner": {
"login": "zyn3rgy",
"id": 73311948,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/73311948?v=4",
"html_url": "https:\/\/github.com\/zyn3rgy"
},
"html_url": "https:\/\/github.com\/zyn3rgy\/ecp_slap",
"description": "CVE-2020-0688 PoC",
"fork": false,
"created_at": "2020-10-23T01:18:13Z",
Auto Update 2021/06/03 12:11:51
2021-06-03 05:11:51 +02:00
"updated_at": "2021-06-02T22:22:39Z",
"pushed_at": "2021-06-02T22:22:37Z",
Auto Update 2021/05/15 12:11:14
2021-05-15 05:11:14 +02:00
"stargazers_count": 7,
"watchers_count": 7,
"forks_count": 1,
"forks": 1,
"watchers": 7,
"score": 0
},
{
"id": 308367304,
"name": "CVE-2020-0688-Scanner",
"full_name": "SLSteff\/CVE-2020-0688-Scanner",
"owner": {
"login": "SLSteff",
"id": 20557573,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/20557573?v=4",
"html_url": "https:\/\/github.com\/SLSteff"
},
"html_url": "https:\/\/github.com\/SLSteff\/CVE-2020-0688-Scanner",
"description": "Scans for Microsoft Exchange Versions with masscan",
"fork": false,
"created_at": "2020-10-29T15:16:24Z",
"updated_at": "2021-03-20T06:54:20Z",
"pushed_at": "2020-10-29T20:06:25Z",
"stargazers_count": 2,
"watchers_count": 2,
"forks_count": 0,
"forks": 0,
"watchers": 2,
"score": 0
},
Auto Update 2021/01/05 00:09:48
2021-01-04 16:09:48 +01:00
{
"id": 326652424,
"name": "CVE-2020-0688",
Auto Update 2021/06/07 06:11:11
2021-06-06 23:11:11 +02:00
"full_name": "MrTiz\/CVE-2020-0688",
Auto Update 2021/01/05 00:09:48
2021-01-04 16:09:48 +01:00
"owner": {
Auto Update 2021/06/07 06:11:11
2021-06-06 23:11:11 +02:00
"login": "MrTiz",
Auto Update 2021/01/05 00:09:48
2021-01-04 16:09:48 +01:00
"id": 29025198,
Auto Update 2021/01/22 00:10:20
2021-01-21 16:10:20 +01:00
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/29025198?v=4",
Auto Update 2021/06/07 06:11:11
2021-06-06 23:11:11 +02:00
"html_url": "https:\/\/github.com\/MrTiz"
Auto Update 2021/01/05 00:09:48
2021-01-04 16:09:48 +01:00
},
Auto Update 2021/06/07 06:11:11
2021-06-06 23:11:11 +02:00
"html_url": "https:\/\/github.com\/MrTiz\/CVE-2020-0688",
Auto Update 2021/01/05 00:09:48
2021-01-04 16:09:48 +01:00
"description": "Remote Code Execution on Microsoft Exchange Server through fixed cryptographic keys",
"fork": false,
"created_at": "2021-01-04T10:48:40Z",
Auto Update 2021/06/07 06:11:11
2021-06-06 23:11:11 +02:00
"updated_at": "2021-06-06T16:03:55Z",
"pushed_at": "2021-06-06T16:03:53Z",
Auto Update 2021/05/11 00:11:32
2021-05-10 17:11:32 +02:00
"stargazers_count": 4,
"watchers_count": 4,
Auto Update 2021/03/16 00:09:38
2021-03-15 16:09:38 +01:00
"forks_count": 2,
"forks": 2,
Auto Update 2021/05/11 00:11:32
2021-05-10 17:11:32 +02:00
"watchers": 4,
Auto Update 2021/01/05 00:09:48
2021-01-04 16:09:48 +01:00
"score": 0
Auto Update 2021/05/04 00:11:21
2021-05-03 17:11:21 +02:00
},
{
"id": 363882684,
"name": "proxylogon",
"full_name": "ann0906\/proxylogon",
"owner": {
"login": "ann0906",
"id": 82447420,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/82447420?v=4",
"html_url": "https:\/\/github.com\/ann0906"
},
"html_url": "https:\/\/github.com\/ann0906\/proxylogon",
"description": "事件: 微軟（Microsoft）上周公布了修補遭到駭客攻擊的 Exchange Server 漏洞，全球恐有數萬個組織受到影響。網域與被入侵的Exchange郵件伺服器有關，而這臺伺服器後來被駭客當作C&C中繼站使用，導致接下來發生加密攻擊事故。 嚴重性: 全球企業普遍使用微軟生態系執行日常業務，若遭受駭客攻擊，將造成用戶機敏資料外洩並導致極大損失。雖然微軟已推出更新補釘，但阿戴爾強調這尚未去除儲存在受害伺服器內的後門殼層（webshell），因此就算尚未受到攻擊的企業可以免於被駭風險，駭客仍有時間入侵已被駭的伺服器留下「定時炸彈」。 從2020年開始，美國便不斷指控中國入侵多家醫藥公司及學術單位，試圖竊取疫苗研發機密，這次事件很可能將使中美之間的關係進一步惡化。至於華為、TikTok等中國服務是否會受到這次駭客事件波及，則暫時還不明朗。 漏洞通報程序: 在2年前，曾經拿下資安圈漏洞奧斯卡獎Pwnie Awards「最佳伺服器漏洞獎」戴夫寇爾首席資安研究員Orange Tsai（蔡政達），漏洞通報記錄不勝枚舉，後來因為針對企業常用的SSL VPN進行漏洞研究與通報，更是在全球資安圈聲名大噪。 不過，在今年3月2日卻發生讓Orange Tsai錯愕不已的事情。那就是，他在今年一月跟微軟通報的2個Exchange漏洞，微軟原訂在3月9日對外釋出修補程式，卻突然提前一週，在3月2日便緊急釋出修補程式。原來是因為，在2月26日到2月28日，這個週五下班後到週末這段期間，全球各地發生許多利用微軟Exchange漏洞發動攻擊的資安事件。 攻擊本質: 有人在網路上大量掃描微軟於本月修補的CVE-2020-0688安全漏洞，該漏洞攸關Microsoft Exchange伺服器，呼籲Exchange用戶應儘速修補。 CVE-2020-0688漏洞肇因於Exchange伺服器在安裝時沒能妥善建立唯一金鑰，將允許具備該知識及信箱的授權用戶以系統權限傳遞任意物件，屬於遠端程式攻擊漏洞，該漏洞影響Microsoft Exchange Server 2010 SP3、Microsoft Exchange Server 2013、Microsoft Exchange Server 2016與Microsoft Exchange Server 2019，但只被微軟列為重要（Important）等級的風險。",
"fork": false,
"created_at": "2021-05-03T09:44:25Z",
"updated_at": "2021-05-03T09:52:40Z",
"pushed_at": "2021-05-03T09:44:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"forks_count": 0,
"forks": 0,
"watchers": 0,
"score": 0
Auto Update 2020/12/31 06:09:58
2020-12-30 22:09:58 +01:00
}
]
Reference in a new issue Copy permalink