2021-03-03 16:09:26 +01:00
[
2023-08-13 08:25:24 +02:00
{
"id" : 344161221 ,
"name" : "exchange-0days-202103" ,
"full_name" : "sgnls\/exchange-0days-202103" ,
"owner" : {
"login" : "sgnls" ,
"id" : 11134228 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/11134228?v=4" ,
"html_url" : "https:\/\/github.com\/sgnls"
} ,
"html_url" : "https:\/\/github.com\/sgnls\/exchange-0days-202103" ,
"description" : "IoC determination for exploitation of CVE-2021-26855, CVE-2021-26857, CVE-2021-26858 and CVE-2021-27065." ,
"fork" : false ,
"created_at" : "2021-03-03T14:50:16Z" ,
"updated_at" : "2022-11-25T07:49:01Z" ,
"pushed_at" : "2021-03-15T11:42:06Z" ,
"stargazers_count" : 5 ,
"watchers_count" : 5 ,
"has_discussions" : false ,
"forks_count" : 4 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 4 ,
"watchers" : 5 ,
"score" : 0 ,
"subscribers_count" : 3
} ,
{
"id" : 344210374 ,
"name" : "HAFNIUM-IOC" ,
"full_name" : "soteria-security\/HAFNIUM-IOC" ,
"owner" : {
"login" : "soteria-security" ,
"id" : 49722282 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/49722282?v=4" ,
"html_url" : "https:\/\/github.com\/soteria-security"
} ,
"html_url" : "https:\/\/github.com\/soteria-security\/HAFNIUM-IOC" ,
"description" : "A PowerShell script to identify indicators of exploitation of CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-26865" ,
"fork" : false ,
"created_at" : "2021-03-03T17:36:18Z" ,
"updated_at" : "2023-08-03T19:21:00Z" ,
"pushed_at" : "2021-03-05T17:09:01Z" ,
"stargazers_count" : 21 ,
"watchers_count" : 21 ,
"has_discussions" : false ,
"forks_count" : 1 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 1 ,
"watchers" : 21 ,
"score" : 0 ,
"subscribers_count" : 3
} ,
{
"id" : 344742582 ,
"name" : "exchange_webshell_detection" ,
"full_name" : "cert-lv\/exchange_webshell_detection" ,
"owner" : {
"login" : "cert-lv" ,
"id" : 22764485 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/22764485?v=4" ,
"html_url" : "https:\/\/github.com\/cert-lv"
} ,
"html_url" : "https:\/\/github.com\/cert-lv\/exchange_webshell_detection" ,
"description" : "Detect webshells dropped on Microsoft Exchange servers exploited through \"proxylogon\" group of vulnerabilites (CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065)" ,
"fork" : false ,
"created_at" : "2021-03-05T08:22:07Z" ,
2023-09-27 20:27:21 +02:00
"updated_at" : "2023-09-27T16:39:46Z" ,
2023-08-13 08:25:24 +02:00
"pushed_at" : "2021-03-16T08:34:14Z" ,
2023-09-27 20:27:21 +02:00
"stargazers_count" : 97 ,
"watchers_count" : 97 ,
2023-08-13 08:25:24 +02:00
"has_discussions" : false ,
"forks_count" : 21 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [
"blueteam" ,
"exchange-server" ,
"infosec" ,
"iocs" ,
"security" ,
"security-audit"
] ,
"visibility" : "public" ,
"forks" : 21 ,
2023-09-27 20:27:21 +02:00
"watchers" : 97 ,
2023-08-13 08:25:24 +02:00
"score" : 0 ,
"subscribers_count" : 14
} ,
{
"id" : 345052378 ,
"name" : "Microsoft_Exchange_Server_SSRF_CVE-2021-26855" ,
"full_name" : "conjojo\/Microsoft_Exchange_Server_SSRF_CVE-2021-26855" ,
"owner" : {
"login" : "conjojo" ,
"id" : 79626719 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/79626719?v=4" ,
"html_url" : "https:\/\/github.com\/conjojo"
} ,
"html_url" : "https:\/\/github.com\/conjojo\/Microsoft_Exchange_Server_SSRF_CVE-2021-26855" ,
"description" : "Microsoft Exchange Server SSRF漏洞(CVE-2021-26855)" ,
"fork" : false ,
"created_at" : "2021-03-06T09:15:55Z" ,
"updated_at" : "2022-11-12T08:35:22Z" ,
"pushed_at" : "2021-03-06T10:34:49Z" ,
"stargazers_count" : 37 ,
"watchers_count" : 37 ,
"has_discussions" : false ,
"forks_count" : 8 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 8 ,
"watchers" : 37 ,
"score" : 0 ,
"subscribers_count" : 1
} ,
{
"id" : 345173055 ,
"name" : "CVE-2021-26855-SSRF" ,
"full_name" : "pussycat0x\/CVE-2021-26855-SSRF" ,
"owner" : {
"login" : "pussycat0x" ,
"id" : 65701233 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/65701233?v=4" ,
"html_url" : "https:\/\/github.com\/pussycat0x"
} ,
"html_url" : "https:\/\/github.com\/pussycat0x\/CVE-2021-26855-SSRF" ,
"description" : "This script helps to identify CVE-2021-26855 ssrf Poc" ,
"fork" : false ,
"created_at" : "2021-03-06T19:03:00Z" ,
2023-09-28 14:53:01 +02:00
"updated_at" : "2023-09-28T11:25:33Z" ,
2023-08-13 08:25:24 +02:00
"pushed_at" : "2021-03-10T07:41:56Z" ,
2023-09-28 14:53:01 +02:00
"stargazers_count" : 21 ,
"watchers_count" : 21 ,
2023-08-13 08:25:24 +02:00
"has_discussions" : false ,
"forks_count" : 12 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [
"cve-2021-26855-ssrf" ,
"microsoft-exchange" ,
"poc" ,
"proxylogon" ,
"ssrf"
] ,
"visibility" : "public" ,
"forks" : 12 ,
2023-09-28 14:53:01 +02:00
"watchers" : 21 ,
2023-08-13 08:25:24 +02:00
"score" : 0 ,
"subscribers_count" : 1
} ,
{
"id" : 345228496 ,
"name" : "CVE-2021-26855-SSRF-Exchange" ,
"full_name" : "La3B0z\/CVE-2021-26855-SSRF-Exchange" ,
"owner" : {
"login" : "La3B0z" ,
"id" : 10507748 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/10507748?v=4" ,
"html_url" : "https:\/\/github.com\/La3B0z"
} ,
"html_url" : "https:\/\/github.com\/La3B0z\/CVE-2021-26855-SSRF-Exchange" ,
"description" : "CVE-2021-26855 SSRF Exchange Server" ,
"fork" : false ,
"created_at" : "2021-03-07T00:55:16Z" ,
"updated_at" : "2022-11-09T18:11:26Z" ,
"pushed_at" : "2021-03-06T18:57:43Z" ,
"stargazers_count" : 6 ,
"watchers_count" : 6 ,
"has_discussions" : false ,
"forks_count" : 4 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 4 ,
"watchers" : 6 ,
"score" : 0 ,
"subscribers_count" : 1
} ,
{
"id" : 345337490 ,
"name" : "exchange_proxylogon" ,
"full_name" : "mekhalleh\/exchange_proxylogon" ,
"owner" : {
"login" : "mekhalleh" ,
"id" : 5225129 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/5225129?v=4" ,
"html_url" : "https:\/\/github.com\/mekhalleh"
} ,
"html_url" : "https:\/\/github.com\/mekhalleh\/exchange_proxylogon" ,
"description" : "Module pack for #ProxyLogon (part. of my contribute for Metasploit-Framework) [CVE-2021-26855 && CVE-2021-27065]" ,
"fork" : false ,
"created_at" : "2021-03-07T12:12:16Z" ,
"updated_at" : "2021-09-12T03:30:10Z" ,
"pushed_at" : "2021-03-29T08:42:01Z" ,
"stargazers_count" : 4 ,
"watchers_count" : 4 ,
"has_discussions" : false ,
"forks_count" : 3 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 3 ,
"watchers" : 4 ,
"score" : 0 ,
"subscribers_count" : 2
} ,
{
"id" : 345567206 ,
"name" : "CVE-2021-26855_SSRF" ,
"full_name" : "Yt1g3r\/CVE-2021-26855_SSRF" ,
"owner" : {
"login" : "Yt1g3r" ,
"id" : 12625147 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/12625147?v=4" ,
"html_url" : "https:\/\/github.com\/Yt1g3r"
} ,
"html_url" : "https:\/\/github.com\/Yt1g3r\/CVE-2021-26855_SSRF" ,
"description" : "POC of CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-26865, ProxyLogon poc" ,
"fork" : false ,
"created_at" : "2021-03-08T07:28:21Z" ,
2023-09-28 14:53:01 +02:00
"updated_at" : "2023-09-28T11:25:36Z" ,
2023-08-13 08:25:24 +02:00
"pushed_at" : "2021-03-11T03:28:47Z" ,
2023-09-28 14:53:01 +02:00
"stargazers_count" : 5 ,
"watchers_count" : 5 ,
2023-08-13 08:25:24 +02:00
"has_discussions" : false ,
"forks_count" : 6 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [
"cve-2021-26855" ,
"proxylogon"
] ,
"visibility" : "public" ,
"forks" : 6 ,
2023-09-28 14:53:01 +02:00
"watchers" : 5 ,
2023-08-13 08:25:24 +02:00
"score" : 0 ,
"subscribers_count" : 2
} ,
{
"id" : 345595529 ,
"name" : "CVE-2021-26855" ,
"full_name" : "hackerxj007\/CVE-2021-26855" ,
"owner" : {
"login" : "hackerxj007" ,
"id" : 23031720 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/23031720?v=4" ,
"html_url" : "https:\/\/github.com\/hackerxj007"
} ,
"html_url" : "https:\/\/github.com\/hackerxj007\/CVE-2021-26855" ,
"description" : "CVE-2021-26855 exp" ,
"fork" : false ,
"created_at" : "2021-03-08T09:12:27Z" ,
2023-10-21 02:24:38 +02:00
"updated_at" : "2023-10-20T18:31:24Z" ,
2023-08-13 08:25:24 +02:00
"pushed_at" : "2021-03-08T08:09:01Z" ,
2023-10-21 02:24:38 +02:00
"stargazers_count" : 5 ,
"watchers_count" : 5 ,
2023-08-13 08:25:24 +02:00
"has_discussions" : false ,
"forks_count" : 75 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 75 ,
2023-10-21 02:24:38 +02:00
"watchers" : 5 ,
2023-08-13 08:25:24 +02:00
"score" : 0 ,
"subscribers_count" : 0
} ,
{
"id" : 345639477 ,
"name" : "proxylogscan" ,
"full_name" : "dwisiswant0\/proxylogscan" ,
"owner" : {
"login" : "dwisiswant0" ,
"id" : 25837540 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/25837540?v=4" ,
"html_url" : "https:\/\/github.com\/dwisiswant0"
} ,
"html_url" : "https:\/\/github.com\/dwisiswant0\/proxylogscan" ,
"description" : "A fast tool to mass scan for a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin (CVE-2021-26855)." ,
"fork" : false ,
"created_at" : "2021-03-08T11:54:32Z" ,
2023-12-04 19:35:21 +01:00
"updated_at" : "2023-12-04T18:12:05Z" ,
2023-08-13 08:25:24 +02:00
"pushed_at" : "2022-03-02T15:41:29Z" ,
2023-12-04 19:35:21 +01:00
"stargazers_count" : 156 ,
"watchers_count" : 156 ,
2023-08-13 08:25:24 +02:00
"has_discussions" : false ,
2023-12-16 13:34:20 +01:00
"forks_count" : 26 ,
2023-08-13 08:25:24 +02:00
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [
"cve-2021-26855" ,
"cve-2021-27065" ,
"microsoft-exchange" ,
"microsoft-exchange-proxylogon" ,
"microsoft-exchange-server" ,
"proxylogon" ,
"ssrf"
] ,
"visibility" : "public" ,
2023-12-16 13:34:20 +01:00
"forks" : 26 ,
2023-12-04 19:35:21 +01:00
"watchers" : 156 ,
2023-08-13 08:25:24 +02:00
"score" : 0 ,
2024-01-01 01:30:55 +01:00
"subscribers_count" : 9
2023-08-13 08:25:24 +02:00
} ,
{
"id" : 345955330 ,
"name" : "ExchangeWeaknessTest" ,
"full_name" : "mauricelambert\/ExchangeWeaknessTest" ,
"owner" : {
"login" : "mauricelambert" ,
"id" : 50479118 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/50479118?v=4" ,
"html_url" : "https:\/\/github.com\/mauricelambert"
} ,
"html_url" : "https:\/\/github.com\/mauricelambert\/ExchangeWeaknessTest" ,
"description" : "This script test the CVE-2021-26855 vulnerability on Exchange Server." ,
"fork" : false ,
"created_at" : "2021-03-09T09:40:29Z" ,
"updated_at" : "2021-03-09T09:43:55Z" ,
"pushed_at" : "2021-03-09T09:42:51Z" ,
"stargazers_count" : 0 ,
"watchers_count" : 0 ,
"has_discussions" : false ,
"forks_count" : 0 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [
"cve" ,
"exchange" ,
"microsoft" ,
"python3" ,
"security" ,
"security-tools"
] ,
"visibility" : "public" ,
"forks" : 0 ,
"watchers" : 0 ,
"score" : 0 ,
"subscribers_count" : 1
} ,
{
"id" : 345970212 ,
"name" : "Exchange_IOC_Hunter" ,
"full_name" : "DCScoder\/Exchange_IOC_Hunter" ,
"owner" : {
"login" : "DCScoder" ,
"id" : 42096735 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/42096735?v=4" ,
"html_url" : "https:\/\/github.com\/DCScoder"
} ,
"html_url" : "https:\/\/github.com\/DCScoder\/Exchange_IOC_Hunter" ,
"description" : "CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065" ,
"fork" : false ,
"created_at" : "2021-03-09T10:36:44Z" ,
"updated_at" : "2021-03-17T10:22:07Z" ,
"pushed_at" : "2021-03-17T10:22:05Z" ,
"stargazers_count" : 0 ,
"watchers_count" : 0 ,
"has_discussions" : false ,
"forks_count" : 0 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 0 ,
"watchers" : 0 ,
"score" : 0 ,
"subscribers_count" : 2
} ,
{
"id" : 346033440 ,
"name" : "CVE-2021-26855-PoC" ,
"full_name" : "srvaccount\/CVE-2021-26855-PoC" ,
"owner" : {
"login" : "srvaccount" ,
"id" : 76211832 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/76211832?v=4" ,
"html_url" : "https:\/\/github.com\/srvaccount"
} ,
"html_url" : "https:\/\/github.com\/srvaccount\/CVE-2021-26855-PoC" ,
"description" : "PoC exploit code for CVE-2021-26855" ,
"fork" : false ,
"created_at" : "2021-03-09T14:27:06Z" ,
"updated_at" : "2023-08-09T18:23:58Z" ,
"pushed_at" : "2021-03-09T21:59:53Z" ,
"stargazers_count" : 17 ,
"watchers_count" : 17 ,
"has_discussions" : false ,
"forks_count" : 20 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 20 ,
"watchers" : 17 ,
"score" : 0 ,
"subscribers_count" : 1
} ,
{
"id" : 346078570 ,
"name" : "CVE-2021-26855" ,
"full_name" : "h4x0r-dz\/CVE-2021-26855" ,
"owner" : {
"login" : "h4x0r-dz" ,
"id" : 26070859 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/26070859?v=4" ,
"html_url" : "https:\/\/github.com\/h4x0r-dz"
} ,
"html_url" : "https:\/\/github.com\/h4x0r-dz\/CVE-2021-26855" ,
"description" : null ,
"fork" : false ,
"created_at" : "2021-03-09T16:54:39Z" ,
2023-11-13 19:52:59 +01:00
"updated_at" : "2023-11-13T16:25:49Z" ,
2023-08-13 08:25:24 +02:00
"pushed_at" : "2021-03-09T16:56:09Z" ,
2023-11-13 19:52:59 +01:00
"stargazers_count" : 99 ,
"watchers_count" : 99 ,
2023-08-13 08:25:24 +02:00
"has_discussions" : false ,
"forks_count" : 61 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 61 ,
2023-11-13 19:52:59 +01:00
"watchers" : 99 ,
2023-08-13 08:25:24 +02:00
"score" : 0 ,
2024-02-01 07:25:56 +01:00
"subscribers_count" : 13
2023-08-13 08:25:24 +02:00
} ,
{
"id" : 346241102 ,
"name" : "CVE-2021-26855_PoC" ,
"full_name" : "alt3kx\/CVE-2021-26855_PoC" ,
"owner" : {
"login" : "alt3kx" ,
"id" : 3140111 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/3140111?v=4" ,
"html_url" : "https:\/\/github.com\/alt3kx"
} ,
"html_url" : "https:\/\/github.com\/alt3kx\/CVE-2021-26855_PoC" ,
"description" : null ,
"fork" : false ,
"created_at" : "2021-03-10T05:21:19Z" ,
2023-09-28 14:53:01 +02:00
"updated_at" : "2023-09-28T11:25:39Z" ,
2023-08-13 08:25:24 +02:00
"pushed_at" : "2021-03-12T16:19:50Z" ,
2023-09-28 14:53:01 +02:00
"stargazers_count" : 53 ,
"watchers_count" : 53 ,
2023-08-13 08:25:24 +02:00
"has_discussions" : false ,
"forks_count" : 31 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 31 ,
2023-09-28 14:53:01 +02:00
"watchers" : 53 ,
2023-08-13 08:25:24 +02:00
"score" : 0 ,
"subscribers_count" : 4
} ,
{
"id" : 346816198 ,
"name" : "CVE-2021-26855" ,
"full_name" : "raheel0x01\/CVE-2021-26855" ,
"owner" : {
"login" : "raheel0x01" ,
"id" : 65211256 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/65211256?v=4" ,
"html_url" : "https:\/\/github.com\/raheel0x01"
} ,
"html_url" : "https:\/\/github.com\/raheel0x01\/CVE-2021-26855" ,
"description" : " CVE-2021-26855, also known as Proxylogon, is a server-side request forgery (SSRF) vulnerability in Exchange that allows an attacker to send arbitrary HTTP requests and authenticate as the Exchange server." ,
"fork" : false ,
"created_at" : "2021-03-11T19:35:35Z" ,
2024-01-01 19:28:46 +01:00
"updated_at" : "2024-01-01T17:05:07Z" ,
"pushed_at" : "2024-01-01T17:04:45Z" ,
2023-09-28 14:53:01 +02:00
"stargazers_count" : 13 ,
"watchers_count" : 13 ,
2023-08-13 08:25:24 +02:00
"has_discussions" : false ,
"forks_count" : 7 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 7 ,
2023-09-28 14:53:01 +02:00
"watchers" : 13 ,
2023-08-13 08:25:24 +02:00
"score" : 0 ,
"subscribers_count" : 1
} ,
{
"id" : 346834084 ,
"name" : "CVE-2021-26855" ,
"full_name" : "hackerschoice\/CVE-2021-26855" ,
"owner" : {
"login" : "hackerschoice" ,
"id" : 57636453 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/57636453?v=4" ,
"html_url" : "https:\/\/github.com\/hackerschoice"
} ,
"html_url" : "https:\/\/github.com\/hackerschoice\/CVE-2021-26855" ,
"description" : "PoC of proxylogon chain SSRF(CVE-2021-26855) to write file by testanull, censored by github" ,
"fork" : false ,
"created_at" : "2021-03-11T20:51:48Z" ,
2023-12-23 01:31:06 +01:00
"updated_at" : "2023-12-22T23:30:46Z" ,
2023-08-13 08:25:24 +02:00
"pushed_at" : "2021-03-11T20:58:08Z" ,
2023-12-23 01:31:06 +01:00
"stargazers_count" : 61 ,
"watchers_count" : 61 ,
2023-08-13 08:25:24 +02:00
"has_discussions" : false ,
2023-10-08 20:29:44 +02:00
"forks_count" : 34 ,
2023-08-13 08:25:24 +02:00
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
2023-10-08 20:29:44 +02:00
"forks" : 34 ,
2023-12-23 01:31:06 +01:00
"watchers" : 61 ,
2023-08-13 08:25:24 +02:00
"score" : 0 ,
"subscribers_count" : 5
} ,
{
"id" : 346840803 ,
"name" : "HAFNIUM-Microsoft-Exchange-0day" ,
"full_name" : "SCS-Labs\/HAFNIUM-Microsoft-Exchange-0day" ,
"owner" : {
"login" : "SCS-Labs" ,
"id" : 67705746 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/67705746?v=4" ,
"html_url" : "https:\/\/github.com\/SCS-Labs"
} ,
"html_url" : "https:\/\/github.com\/SCS-Labs\/HAFNIUM-Microsoft-Exchange-0day" ,
"description" : "CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065" ,
"fork" : false ,
"created_at" : "2021-03-11T21:18:29Z" ,
"updated_at" : "2021-04-19T19:31:47Z" ,
"pushed_at" : "2021-04-19T19:31:45Z" ,
"stargazers_count" : 5 ,
"watchers_count" : 5 ,
"has_discussions" : true ,
2024-03-03 01:26:16 +01:00
"forks_count" : 4 ,
2023-08-13 08:25:24 +02:00
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [
"0day" ,
"agency-security" ,
"cve-2021-26855" ,
"cve-2021-26857" ,
"cve-2021-26858" ,
"cve-2021-27065" ,
"detections" ,
"microsoft-exchange" ,
"microsoft-exchange-server" ,
"mitigations" ,
"proxylogon" ,
"timeline" ,
"tweets" ,
"zeroday"
] ,
"visibility" : "public" ,
2024-03-03 01:26:16 +01:00
"forks" : 4 ,
2023-08-13 08:25:24 +02:00
"watchers" : 5 ,
"score" : 0 ,
"subscribers_count" : 1
} ,
{
"id" : 347064151 ,
"name" : "CVE-2021-26855-Scanner" ,
"full_name" : "KotSec\/CVE-2021-26855-Scanner" ,
"owner" : {
"login" : "KotSec" ,
"id" : 80525807 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/80525807?v=4" ,
"html_url" : "https:\/\/github.com\/KotSec"
} ,
"html_url" : "https:\/\/github.com\/KotSec\/CVE-2021-26855-Scanner" ,
"description" : "Scanner and PoC for CVE-2021-26855 " ,
"fork" : false ,
"created_at" : "2021-03-12T12:47:41Z" ,
2023-08-21 20:46:47 +02:00
"updated_at" : "2023-08-21T15:37:11Z" ,
2023-08-13 08:25:24 +02:00
"pushed_at" : "2021-03-12T12:55:57Z" ,
2023-08-21 20:46:47 +02:00
"stargazers_count" : 4 ,
"watchers_count" : 4 ,
2023-08-13 08:25:24 +02:00
"has_discussions" : false ,
"forks_count" : 2 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 2 ,
2023-08-21 20:46:47 +02:00
"watchers" : 4 ,
2023-08-13 08:25:24 +02:00
"score" : 0 ,
"subscribers_count" : 1
} ,
2023-08-25 16:01:36 +02:00
{
"id" : 347638787 ,
"name" : "proxylogon" ,
"full_name" : "hakivvi\/proxylogon" ,
"owner" : {
"login" : "hakivvi" ,
"id" : 67718634 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/67718634?v=4" ,
"html_url" : "https:\/\/github.com\/hakivvi"
} ,
"html_url" : "https:\/\/github.com\/hakivvi\/proxylogon" ,
"description" : "RCE exploit for Microsoft Exchange Server (CVE-2021-26855)." ,
"fork" : false ,
"created_at" : "2021-03-14T13:04:07Z" ,
"updated_at" : "2023-06-16T16:27:28Z" ,
"pushed_at" : "2022-04-23T03:21:44Z" ,
"stargazers_count" : 21 ,
"watchers_count" : 21 ,
"has_discussions" : false ,
"forks_count" : 6 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [
"cve-2021-26855"
] ,
"visibility" : "public" ,
"forks" : 6 ,
"watchers" : 21 ,
"score" : 0 ,
"subscribers_count" : 1
} ,
2023-08-13 08:25:24 +02:00
{
"id" : 347658157 ,
"name" : "Exch-CVE-2021-26855" ,
"full_name" : "ZephrFish\/Exch-CVE-2021-26855" ,
"owner" : {
"login" : "ZephrFish" ,
"id" : 5783068 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/5783068?v=4" ,
"html_url" : "https:\/\/github.com\/ZephrFish"
} ,
"html_url" : "https:\/\/github.com\/ZephrFish\/Exch-CVE-2021-26855" ,
"description" : "CVE-2021-26855: PoC (Not a HoneyPoC for once!)" ,
"fork" : false ,
"created_at" : "2021-03-14T14:23:34Z" ,
2024-01-22 07:50:31 +01:00
"updated_at" : "2024-01-22T05:20:43Z" ,
2023-08-13 08:25:24 +02:00
"pushed_at" : "2021-03-15T18:56:38Z" ,
2024-01-22 07:50:31 +01:00
"stargazers_count" : 27 ,
"watchers_count" : 27 ,
2023-08-13 08:25:24 +02:00
"has_discussions" : false ,
2024-03-08 07:26:50 +01:00
"forks_count" : 14 ,
2023-08-13 08:25:24 +02:00
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
2024-03-08 07:26:50 +01:00
"forks" : 14 ,
2024-01-22 07:50:31 +01:00
"watchers" : 27 ,
2023-08-13 08:25:24 +02:00
"score" : 0 ,
"subscribers_count" : 4
} ,
{
"id" : 347774757 ,
"name" : "ProxyLogon-CVE-2021-26855" ,
"full_name" : "mil1200\/ProxyLogon-CVE-2021-26855" ,
"owner" : {
"login" : "mil1200" ,
"id" : 18125445 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/18125445?v=4" ,
"html_url" : "https:\/\/github.com\/mil1200"
} ,
"html_url" : "https:\/\/github.com\/mil1200\/ProxyLogon-CVE-2021-26855" ,
"description" : "RCE exploit for ProxyLogon vulnerability in Microsoft Exchange" ,
"fork" : false ,
"created_at" : "2021-03-14T22:57:21Z" ,
2023-09-28 14:53:01 +02:00
"updated_at" : "2023-09-28T11:25:47Z" ,
2023-08-13 08:25:24 +02:00
"pushed_at" : "2021-03-14T23:03:12Z" ,
2023-09-28 14:53:01 +02:00
"stargazers_count" : 9 ,
"watchers_count" : 9 ,
2023-08-13 08:25:24 +02:00
"has_discussions" : false ,
"forks_count" : 8 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 8 ,
2023-09-28 14:53:01 +02:00
"watchers" : 9 ,
2023-08-13 08:25:24 +02:00
"score" : 0 ,
"subscribers_count" : 1
} ,
{
"id" : 347900434 ,
"name" : "ExchangeSSRFtoRCEExploit" ,
"full_name" : "evilashz\/ExchangeSSRFtoRCEExploit" ,
"owner" : {
"login" : "evilashz" ,
"id" : 50722929 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/50722929?v=4" ,
"html_url" : "https:\/\/github.com\/evilashz"
} ,
"html_url" : "https:\/\/github.com\/evilashz\/ExchangeSSRFtoRCEExploit" ,
"description" : "CVE-2021-26855 & CVE-2021-27065" ,
"fork" : false ,
"created_at" : "2021-03-15T09:02:40Z" ,
2023-09-28 14:53:01 +02:00
"updated_at" : "2023-09-28T11:25:48Z" ,
2023-08-13 08:25:24 +02:00
"pushed_at" : "2021-03-15T09:19:45Z" ,
2023-09-28 14:53:01 +02:00
"stargazers_count" : 28 ,
"watchers_count" : 28 ,
2023-08-13 08:25:24 +02:00
"has_discussions" : false ,
"forks_count" : 10 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [
"cve-2021-26855" ,
"cve-2021-27065" ,
"proxylogon"
] ,
"visibility" : "public" ,
"forks" : 10 ,
2023-09-28 14:53:01 +02:00
"watchers" : 28 ,
2023-08-13 08:25:24 +02:00
"score" : 0 ,
2023-11-10 01:40:00 +01:00
"subscribers_count" : 2
2023-08-13 08:25:24 +02:00
} ,
{
"id" : 347961970 ,
"name" : "Exch-CVE-2021-26855_Priv" ,
"full_name" : "ZephrFish\/Exch-CVE-2021-26855_Priv" ,
"owner" : {
"login" : "ZephrFish" ,
"id" : 5783068 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/5783068?v=4" ,
"html_url" : "https:\/\/github.com\/ZephrFish"
} ,
"html_url" : "https:\/\/github.com\/ZephrFish\/Exch-CVE-2021-26855_Priv" ,
"description" : "patched to work" ,
"fork" : false ,
"created_at" : "2021-03-15T12:33:04Z" ,
"updated_at" : "2023-03-01T05:35:13Z" ,
"pushed_at" : "2022-10-08T02:30:28Z" ,
"stargazers_count" : 4 ,
"watchers_count" : 4 ,
"has_discussions" : false ,
"forks_count" : 1 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 1 ,
"watchers" : 4 ,
"score" : 0 ,
"subscribers_count" : 2
} ,
{
"id" : 347992754 ,
"name" : "CVE-2021-26855-d" ,
"full_name" : "Mr-xn\/CVE-2021-26855-d" ,
"owner" : {
"login" : "Mr-xn" ,
"id" : 18260135 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/18260135?v=4" ,
"html_url" : "https:\/\/github.com\/Mr-xn"
} ,
"html_url" : "https:\/\/github.com\/Mr-xn\/CVE-2021-26855-d" ,
"description" : null ,
"fork" : false ,
"created_at" : "2021-03-15T14:03:16Z" ,
2023-09-28 14:53:01 +02:00
"updated_at" : "2023-09-28T11:25:48Z" ,
2023-08-13 08:25:24 +02:00
"pushed_at" : "2021-03-15T14:08:16Z" ,
2023-09-28 14:53:01 +02:00
"stargazers_count" : 7 ,
"watchers_count" : 7 ,
2023-08-13 08:25:24 +02:00
"has_discussions" : false ,
"forks_count" : 4 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 4 ,
2023-09-28 14:53:01 +02:00
"watchers" : 7 ,
2023-08-13 08:25:24 +02:00
"score" : 0 ,
"subscribers_count" : 2
} ,
{
"id" : 348253285 ,
"name" : "ProxyLogon" ,
"full_name" : "RickGeex\/ProxyLogon" ,
"owner" : {
"login" : "RickGeex" ,
"id" : 7975904 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/7975904?v=4" ,
"html_url" : "https:\/\/github.com\/RickGeex"
} ,
"html_url" : "https:\/\/github.com\/RickGeex\/ProxyLogon" ,
"description" : "ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability, CVE-2021-27065, to get code execution." ,
"fork" : false ,
"created_at" : "2021-03-16T07:31:25Z" ,
2023-11-03 13:26:54 +01:00
"updated_at" : "2023-11-03T08:22:11Z" ,
2023-08-13 08:25:24 +02:00
"pushed_at" : "2021-05-01T17:20:15Z" ,
2023-11-03 13:26:54 +01:00
"stargazers_count" : 30 ,
"watchers_count" : 30 ,
2023-08-13 08:25:24 +02:00
"has_discussions" : false ,
2023-08-31 15:50:43 +02:00
"forks_count" : 7 ,
2023-08-13 08:25:24 +02:00
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
2023-08-31 15:50:43 +02:00
"forks" : 7 ,
2023-11-03 13:26:54 +01:00
"watchers" : 30 ,
2023-08-13 08:25:24 +02:00
"score" : 0 ,
"subscribers_count" : 2
} ,
{
"id" : 348300485 ,
"name" : "ProxyLogon" ,
"full_name" : "Immersive-Labs-Sec\/ProxyLogon" ,
"owner" : {
"login" : "Immersive-Labs-Sec" ,
"id" : 79456607 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/79456607?v=4" ,
"html_url" : "https:\/\/github.com\/Immersive-Labs-Sec"
} ,
"html_url" : "https:\/\/github.com\/Immersive-Labs-Sec\/ProxyLogon" ,
"description" : "Chaining CVE-2021-26855 and CVE-2021-26857 to exploit Microsoft Exchange" ,
"fork" : false ,
"created_at" : "2021-03-16T10:14:56Z" ,
"updated_at" : "2021-03-24T16:54:40Z" ,
"pushed_at" : "2021-03-22T09:22:20Z" ,
"stargazers_count" : 3 ,
"watchers_count" : 3 ,
"has_discussions" : false ,
"forks_count" : 1 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 1 ,
"watchers" : 3 ,
"score" : 0 ,
"subscribers_count" : 1
} ,
{
"id" : 348408422 ,
"name" : "Scan-Vuln-CVE-2021-26855" ,
"full_name" : "shacojx\/Scan-Vuln-CVE-2021-26855" ,
"owner" : {
"login" : "shacojx" ,
"id" : 19655109 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/19655109?v=4" ,
"html_url" : "https:\/\/github.com\/shacojx"
} ,
"html_url" : "https:\/\/github.com\/shacojx\/Scan-Vuln-CVE-2021-26855" ,
"description" : null ,
"fork" : false ,
"created_at" : "2021-03-16T15:59:17Z" ,
2023-09-28 14:53:01 +02:00
"updated_at" : "2023-09-28T11:25:50Z" ,
2023-08-13 08:25:24 +02:00
"pushed_at" : "2021-03-18T10:52:00Z" ,
2023-09-28 14:53:01 +02:00
"stargazers_count" : 4 ,
"watchers_count" : 4 ,
2023-08-13 08:25:24 +02:00
"has_discussions" : false ,
"forks_count" : 3 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 3 ,
2023-09-28 14:53:01 +02:00
"watchers" : 4 ,
2023-08-13 08:25:24 +02:00
"score" : 0 ,
"subscribers_count" : 2
} ,
{
"id" : 348568793 ,
"name" : "ProxyLogon-CVE-2021-26855-metasploit" ,
"full_name" : "TaroballzChen\/ProxyLogon-CVE-2021-26855-metasploit" ,
"owner" : {
"login" : "TaroballzChen" ,
"id" : 27862593 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/27862593?v=4" ,
"html_url" : "https:\/\/github.com\/TaroballzChen"
} ,
"html_url" : "https:\/\/github.com\/TaroballzChen\/ProxyLogon-CVE-2021-26855-metasploit" ,
"description" : "CVE-2021-26855 proxyLogon metasploit exploit script" ,
"fork" : false ,
"created_at" : "2021-03-17T03:32:19Z" ,
2023-10-23 20:25:58 +02:00
"updated_at" : "2023-10-23T17:23:35Z" ,
2023-08-13 08:25:24 +02:00
"pushed_at" : "2021-03-17T05:51:30Z" ,
2023-10-23 20:25:58 +02:00
"stargazers_count" : 5 ,
"watchers_count" : 5 ,
2023-08-13 08:25:24 +02:00
"has_discussions" : false ,
"forks_count" : 4 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [
"cve-2021-26855" ,
"metasploit" ,
"proxylogon"
] ,
"visibility" : "public" ,
"forks" : 4 ,
2023-10-23 20:25:58 +02:00
"watchers" : 5 ,
2023-08-13 08:25:24 +02:00
"score" : 0 ,
"subscribers_count" : 2
} ,
{
"id" : 348573564 ,
"name" : "ProxyLogon" ,
"full_name" : "p0wershe11\/ProxyLogon" ,
"owner" : {
"login" : "p0wershe11" ,
"id" : 80803923 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/80803923?v=4" ,
"html_url" : "https:\/\/github.com\/p0wershe11"
} ,
"html_url" : "https:\/\/github.com\/p0wershe11\/ProxyLogon" ,
"description" : "ProxyLogon(CVE-2021-26855+CVE-2021-27065) Exchange Server RCE(SSRF->GetWebShell)" ,
"fork" : false ,
"created_at" : "2021-03-17T03:56:54Z" ,
2024-03-02 01:26:38 +01:00
"updated_at" : "2024-03-01T23:02:55Z" ,
2023-08-13 08:25:24 +02:00
"pushed_at" : "2021-03-17T05:06:18Z" ,
2024-03-02 01:26:38 +01:00
"stargazers_count" : 120 ,
"watchers_count" : 120 ,
2023-08-13 08:25:24 +02:00
"has_discussions" : false ,
2024-03-02 01:26:38 +01:00
"forks_count" : 35 ,
2023-08-13 08:25:24 +02:00
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [
"0day" ,
"cve-2021-26855" ,
"cve-2021-26855-ssrf" ,
"cve-2021-27065" ,
"exploit" ,
"microsoft-exchange" ,
"microsoft-exchange-proxylogon" ,
"microsoft-exchange-server" ,
"proxylogon" ,
"zeroday"
] ,
"visibility" : "public" ,
2024-03-02 01:26:38 +01:00
"forks" : 35 ,
"watchers" : 120 ,
2023-08-13 08:25:24 +02:00
"score" : 0 ,
"subscribers_count" : 2
} ,
{
"id" : 349035798 ,
"name" : "CVE-2021-26855-exploit-Exchange" ,
"full_name" : "shacojx\/CVE-2021-26855-exploit-Exchange" ,
"owner" : {
"login" : "shacojx" ,
"id" : 19655109 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/19655109?v=4" ,
"html_url" : "https:\/\/github.com\/shacojx"
} ,
"html_url" : "https:\/\/github.com\/shacojx\/CVE-2021-26855-exploit-Exchange" ,
"description" : null ,
"fork" : false ,
"created_at" : "2021-03-18T10:45:54Z" ,
"updated_at" : "2023-06-13T00:44:08Z" ,
"pushed_at" : "2021-04-05T02:36:51Z" ,
"stargazers_count" : 5 ,
"watchers_count" : 5 ,
"has_discussions" : false ,
"forks_count" : 4 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 4 ,
"watchers" : 5 ,
"score" : 0 ,
"subscribers_count" : 2
} ,
{
"id" : 349915444 ,
"name" : "CVE-2021-26855-Exchange-RCE" ,
"full_name" : "catmandx\/CVE-2021-26855-Exchange-RCE" ,
"owner" : {
"login" : "catmandx" ,
"id" : 50922013 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/50922013?v=4" ,
"html_url" : "https:\/\/github.com\/catmandx"
} ,
"html_url" : "https:\/\/github.com\/catmandx\/CVE-2021-26855-Exchange-RCE" ,
"description" : "Microsoft Exchange Proxylogon Exploit Chain EXP分析" ,
"fork" : false ,
"created_at" : "2021-03-21T06:16:24Z" ,
"updated_at" : "2021-03-21T06:16:24Z" ,
"pushed_at" : "2021-03-18T00:55:39Z" ,
"stargazers_count" : 0 ,
"watchers_count" : 0 ,
"has_discussions" : false ,
"forks_count" : 9 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 9 ,
"watchers" : 0 ,
"score" : 0 ,
"subscribers_count" : 0
} ,
{
"id" : 350620709 ,
"name" : "CVE-2021-26855-CVE-2021-27065" ,
"full_name" : "hictf\/CVE-2021-26855-CVE-2021-27065" ,
"owner" : {
"login" : "hictf" ,
"id" : 43127173 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/43127173?v=4" ,
"html_url" : "https:\/\/github.com\/hictf"
} ,
"html_url" : "https:\/\/github.com\/hictf\/CVE-2021-26855-CVE-2021-27065" ,
"description" : "analytics ProxyLogo Mail exchange RCE" ,
"fork" : false ,
"created_at" : "2021-03-23T07:37:47Z" ,
"updated_at" : "2021-03-23T19:02:32Z" ,
"pushed_at" : "2021-03-23T19:02:30Z" ,
"stargazers_count" : 0 ,
"watchers_count" : 0 ,
"has_discussions" : false ,
"forks_count" : 0 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 0 ,
"watchers" : 0 ,
"score" : 0 ,
"subscribers_count" : 1
} ,
{
"id" : 350906098 ,
"name" : "proxylogon-exploit" ,
"full_name" : "praetorian-inc\/proxylogon-exploit" ,
"owner" : {
"login" : "praetorian-inc" ,
"id" : 8173787 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/8173787?v=4" ,
"html_url" : "https:\/\/github.com\/praetorian-inc"
} ,
"html_url" : "https:\/\/github.com\/praetorian-inc\/proxylogon-exploit" ,
"description" : "Proof-of-concept exploit for CVE-2021-26855 and CVE-2021-27065. Unauthenticated RCE in Exchange." ,
"fork" : false ,
"created_at" : "2021-03-24T01:12:48Z" ,
2023-10-20 20:27:44 +02:00
"updated_at" : "2023-10-20T14:28:38Z" ,
2023-08-13 08:25:24 +02:00
"pushed_at" : "2021-03-24T01:25:05Z" ,
2023-10-20 20:27:44 +02:00
"stargazers_count" : 46 ,
"watchers_count" : 46 ,
2023-08-13 08:25:24 +02:00
"has_discussions" : false ,
"forks_count" : 16 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 16 ,
2023-10-20 20:27:44 +02:00
"watchers" : 46 ,
2023-08-13 08:25:24 +02:00
"score" : 0 ,
2024-03-28 07:26:36 +01:00
"subscribers_count" : 19
2023-08-13 08:25:24 +02:00
} ,
{
"id" : 352785704 ,
"name" : "SharpProxyLogon" ,
"full_name" : "Flangvik\/SharpProxyLogon" ,
"owner" : {
"login" : "Flangvik" ,
"id" : 23613997 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/23613997?v=4" ,
"html_url" : "https:\/\/github.com\/Flangvik"
} ,
"html_url" : "https:\/\/github.com\/Flangvik\/SharpProxyLogon" ,
"description" : "C# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode injection " ,
"fork" : false ,
"created_at" : "2021-03-29T21:10:34Z" ,
2023-12-29 07:40:52 +01:00
"updated_at" : "2023-12-29T00:53:27Z" ,
2023-08-13 08:25:24 +02:00
"pushed_at" : "2021-03-31T11:57:38Z" ,
2023-12-29 07:40:52 +01:00
"stargazers_count" : 236 ,
"watchers_count" : 236 ,
2023-08-13 08:25:24 +02:00
"has_discussions" : false ,
2024-03-08 07:26:50 +01:00
"forks_count" : 41 ,
2023-08-13 08:25:24 +02:00
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
2024-03-08 07:26:50 +01:00
"forks" : 41 ,
2023-12-29 07:40:52 +01:00
"watchers" : 236 ,
2023-08-13 08:25:24 +02:00
"score" : 0 ,
"subscribers_count" : 6
} ,
{
"id" : 357875949 ,
"name" : "ProxyVulns" ,
"full_name" : "hosch3n\/ProxyVulns" ,
"owner" : {
"login" : "hosch3n" ,
"id" : 29953808 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/29953808?v=4" ,
"html_url" : "https:\/\/github.com\/hosch3n"
} ,
"html_url" : "https:\/\/github.com\/hosch3n\/ProxyVulns" ,
"description" : "[ProxyLogon] CVE-2021-26855 & CVE-2021-27065 Fixed RawIdentity Bug Exploit. [ProxyOracle] CVE-2021-31195 & CVE-2021-31196 Exploit Chains. [ProxyShell] CVE-2021-34473 & CVE-2021-34523 & CVE-2021-31207 Exploit Chains." ,
"fork" : false ,
"created_at" : "2021-04-14T11:12:30Z" ,
2024-02-20 13:26:44 +01:00
"updated_at" : "2024-02-20T07:02:36Z" ,
2023-08-13 08:25:24 +02:00
"pushed_at" : "2022-10-21T08:59:23Z" ,
2024-02-20 13:26:44 +01:00
"stargazers_count" : 174 ,
"watchers_count" : 174 ,
2023-08-13 08:25:24 +02:00
"has_discussions" : false ,
2023-08-20 15:42:57 +02:00
"forks_count" : 37 ,
2023-08-13 08:25:24 +02:00
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
2023-08-20 15:42:57 +02:00
"forks" : 37 ,
2024-02-20 13:26:44 +01:00
"watchers" : 174 ,
2023-08-13 08:25:24 +02:00
"score" : 0 ,
"subscribers_count" : 4
} ,
{
"id" : 359403469 ,
"name" : "106362522" ,
"full_name" : "Nick-Yin12\/106362522" ,
"owner" : {
"login" : "Nick-Yin12" ,
"id" : 82452652 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/82452652?v=4" ,
"html_url" : "https:\/\/github.com\/Nick-Yin12"
} ,
"html_url" : "https:\/\/github.com\/Nick-Yin12\/106362522" ,
"description" : "針對近期微軟公布修補遭駭客攻擊的Exchange Server漏洞問題, 台灣DEVCORE表示早在1月5日便已發現安全漏洞後, 並且向微軟通報此項編號命名為「CVE-2021-26855 」, 以及「CVE-2021-27065」的零日漏洞, 同時也將此項漏洞稱為「ProxyLogon」。 此次揭露的「ProxyLogon」漏洞, 是以無需驗證即可使用的遠端程式碼執行 (Pre-Auth Remote Code Execution; Pre-Auth RCE)零日漏洞(Zero-day exploit),可讓攻擊者得以繞過身份驗證步驟,驅使系統管理員協助執行惡意文件或執行指令,進而觸發更廣泛的攻擊。 「ProxyLogon」是微軟近期被揭露最重大的RCE漏洞之一, DEVCORE團隊遵循責任揭露 (Responsible Disclosure)原則, 在發現後便第一時間立即於今年1月5日通報微軟進行修補, 避免該漏洞遭有心人士利用, 造成全球用戶重大損失。而微軟遂於3月2日針對相關漏洞釋出安全更新, 避免用戶機敏資訊遭受惡意攻擊。個人想法:遭駭客攻擊的Exchange Server漏洞問題, 台灣DEVCORE表示早在1月5日便已發現, 並且向微軟通報此項編號命名為「CVE-2021-26855 」, 以及「CVE-2021-27065」的零日漏洞, 同時也將此項漏洞稱為「ProxyLogon」。 此次揭露的「ProxyLogon」漏洞, 是以無需驗證即可使用的遠端程式碼執行 (Pre-Auth Remote Code Execution; Pre-Auth RCE)零日漏洞(Zero-day exploit),可讓攻擊者得以繞過身份驗證步驟,驅使系統管理員協助執行惡意文件或執行指令,進而觸發更廣泛的攻擊。 「ProxyLogon」是微軟近期被揭露最重大的RCE漏洞之一, DEVCORE團隊遵循責任揭露 (Responsible Disclosure)原則, 在發現後便第一時間立即於今年1月5日通報微軟進行修補, 避免該漏洞遭有心人士利用, 造成全球用戶重大損失。而微軟遂於3月2日針對相關漏洞釋出安全更新, 避免用戶機敏資訊遭受惡意攻擊。個人想法:微軟是大眾常用的軟體之一, 駭客只要察覺漏洞就會進行惡意的攻擊, 微軟公布4個Exchange Server的安全漏洞後, 就遭受駭客的惡意攻擊, 這件事的發生, 微軟需更加小心並提高資安的防護。" ,
"fork" : false ,
"created_at" : "2021-04-19T09:33:52Z" ,
"updated_at" : "2021-04-19T09:35:18Z" ,
"pushed_at" : "2021-04-19T09:35:16Z" ,
"stargazers_count" : 0 ,
"watchers_count" : 0 ,
"has_discussions" : false ,
"forks_count" : 0 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 0 ,
"watchers" : 0 ,
"score" : 0 ,
"subscribers_count" : 1
} ,
{
"id" : 422862938 ,
"name" : "Flangvik" ,
"full_name" : "yaoxiaoangry3\/Flangvik" ,
"owner" : {
"login" : "yaoxiaoangry3" ,
"id" : 93431453 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/93431453?v=4" ,
"html_url" : "https:\/\/github.com\/yaoxiaoangry3"
} ,
"html_url" : "https:\/\/github.com\/yaoxiaoangry3\/Flangvik" ,
"description" : "C# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode in…" ,
"fork" : false ,
"created_at" : "2021-10-30T11:31:48Z" ,
"updated_at" : "2021-10-30T11:31:52Z" ,
"pushed_at" : "2021-10-30T11:31:50Z" ,
"stargazers_count" : 0 ,
"watchers_count" : 0 ,
"has_discussions" : false ,
"forks_count" : 0 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 0 ,
"watchers" : 0 ,
"score" : 0 ,
"subscribers_count" : 1
} ,
2023-01-02 13:13:52 +01:00
{
"id" : 435023930 ,
"name" : "poc_proxylogon" ,
"full_name" : "thau0x01\/poc_proxylogon" ,
"owner" : {
"login" : "thau0x01" ,
"id" : 8220038 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/8220038?v=4" ,
"html_url" : "https:\/\/github.com\/thau0x01"
} ,
"html_url" : "https:\/\/github.com\/thau0x01\/poc_proxylogon" ,
"description" : "Microsoft Exchange ProxyLogon PoC (CVE-2021-26855)" ,
"fork" : false ,
"created_at" : "2021-12-04T22:38:30Z" ,
2024-03-01 01:26:37 +01:00
"updated_at" : "2024-02-29T20:23:44Z" ,
2023-01-02 13:13:52 +01:00
"pushed_at" : "2022-02-10T15:20:42Z" ,
2024-03-01 01:26:37 +01:00
"stargazers_count" : 8 ,
"watchers_count" : 8 ,
2023-01-02 13:13:52 +01:00
"has_discussions" : false ,
"forks_count" : 1 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 1 ,
2024-03-01 01:26:37 +01:00
"watchers" : 8 ,
2023-06-19 15:46:37 +02:00
"score" : 0 ,
2023-10-27 02:23:50 +02:00
"subscribers_count" : 0
2023-01-07 01:35:14 +01:00
} ,
{
"id" : 500657432 ,
"name" : "Flangvik" ,
"full_name" : "1342486672\/Flangvik" ,
"owner" : {
"login" : "1342486672" ,
"id" : 107014850 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/107014850?v=4" ,
"html_url" : "https:\/\/github.com\/1342486672"
} ,
"html_url" : "https:\/\/github.com\/1342486672\/Flangvik" ,
"description" : "C# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode in…" ,
"fork" : false ,
"created_at" : "2022-06-07T02:09:10Z" ,
"updated_at" : "2022-06-07T02:09:10Z" ,
"pushed_at" : "2022-06-07T02:09:11Z" ,
"stargazers_count" : 0 ,
"watchers_count" : 0 ,
"has_discussions" : false ,
"forks_count" : 0 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 0 ,
"watchers" : 0 ,
2023-06-19 15:46:37 +02:00
"score" : 0 ,
"subscribers_count" : 1
2023-01-07 01:35:14 +01:00
} ,
{
"id" : 507096297 ,
"name" : "ExchangeSmash" ,
"full_name" : "TheDudeD6\/ExchangeSmash" ,
"owner" : {
"login" : "TheDudeD6" ,
"id" : 108148004 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/108148004?v=4" ,
"html_url" : "https:\/\/github.com\/TheDudeD6"
} ,
"html_url" : "https:\/\/github.com\/TheDudeD6\/ExchangeSmash" ,
"description" : "CVE-2021-26855" ,
"fork" : false ,
"created_at" : "2022-06-24T17:42:28Z" ,
"updated_at" : "2022-06-24T17:42:46Z" ,
"pushed_at" : "2022-06-24T17:42:43Z" ,
"stargazers_count" : 0 ,
"watchers_count" : 0 ,
"has_discussions" : false ,
"forks_count" : 1 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 1 ,
"watchers" : 0 ,
2023-06-19 15:46:37 +02:00
"score" : 0 ,
"subscribers_count" : 1
2023-01-07 01:35:14 +01:00
} ,
{
"id" : 507818569 ,
"name" : "ProxyLogon" ,
"full_name" : "kh4sh3i\/ProxyLogon" ,
"owner" : {
"login" : "kh4sh3i" ,
"id" : 64693844 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/64693844?v=4" ,
"html_url" : "https:\/\/github.com\/kh4sh3i"
} ,
"html_url" : "https:\/\/github.com\/kh4sh3i\/ProxyLogon" ,
"description" : "ProxyLogon (CVE-2021-26855+CVE-2021-27065) Exchange Server RCE (SSRF->GetWebShell)" ,
"fork" : false ,
"created_at" : "2022-06-27T08:07:48Z" ,
2024-01-16 07:38:57 +01:00
"updated_at" : "2024-01-16T03:28:45Z" ,
2023-03-29 02:32:57 +02:00
"pushed_at" : "2023-03-28T19:07:50Z" ,
2024-01-16 07:38:57 +01:00
"stargazers_count" : 5 ,
"watchers_count" : 5 ,
2023-01-07 01:35:14 +01:00
"has_discussions" : false ,
2024-03-03 01:26:16 +01:00
"forks_count" : 1 ,
2023-01-07 01:35:14 +01:00
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [
"0day" ,
"2021-27065" ,
"cve" ,
"cve-2021-26855" ,
"exchange" ,
"exchange-server" ,
"exploit" ,
"microsoft" ,
"microsoft-exchange-proxylogon" ,
"outlook" ,
"proxylogon" ,
"zeroday"
] ,
"visibility" : "public" ,
2024-03-03 01:26:16 +01:00
"forks" : 1 ,
2024-01-16 07:38:57 +01:00
"watchers" : 5 ,
2023-06-19 15:46:37 +02:00
"score" : 0 ,
"subscribers_count" : 2
2023-02-02 19:32:31 +01:00
} ,
2024-01-10 01:30:26 +01:00
{
"id" : 591884657 ,
"name" : "Zirconium" ,
"full_name" : "byinarie\/Zirconium" ,
"owner" : {
"login" : "byinarie" ,
"id" : 20119926 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/20119926?v=4" ,
"html_url" : "https:\/\/github.com\/byinarie"
} ,
"html_url" : "https:\/\/github.com\/byinarie\/Zirconium" ,
"description" : "Tool to search for IOCs related to HAFNIUM: CVE-2021-26855 CVE-2021-26857 CVE-2021-26858 CVE-2021-27065" ,
"fork" : false ,
"created_at" : "2023-01-22T07:59:10Z" ,
"updated_at" : "2023-10-31T15:00:44Z" ,
"pushed_at" : "2021-03-05T23:56:43Z" ,
"stargazers_count" : 2 ,
"watchers_count" : 2 ,
"has_discussions" : false ,
"forks_count" : 1 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 1 ,
"watchers" : 2 ,
"score" : 0 ,
"subscribers_count" : 0
} ,
2023-05-19 14:30:08 +02:00
{
"id" : 596567126 ,
"name" : "Microsoft-Exchange-RCE" ,
2023-09-03 15:41:16 +02:00
"full_name" : "ssrsec\/Microsoft-Exchange-RCE" ,
2023-05-19 14:30:08 +02:00
"owner" : {
2023-09-03 15:41:16 +02:00
"login" : "ssrsec" ,
2023-05-19 14:30:08 +02:00
"id" : 48439183 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/48439183?v=4" ,
2023-09-03 15:41:16 +02:00
"html_url" : "https:\/\/github.com\/ssrsec"
2023-05-19 14:30:08 +02:00
} ,
2023-09-03 15:41:16 +02:00
"html_url" : "https:\/\/github.com\/ssrsec\/Microsoft-Exchange-RCE" ,
2023-05-19 14:30:08 +02:00
"description" : "Microsoft Exchange CVE-2021-26855&CVE-2021-27065" ,
"fork" : false ,
"created_at" : "2023-02-02T13:20:45Z" ,
"updated_at" : "2023-02-03T02:40:14Z" ,
"pushed_at" : "2023-02-02T13:24:31Z" ,
"stargazers_count" : 3 ,
"watchers_count" : 3 ,
"has_discussions" : false ,
"forks_count" : 2 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 2 ,
"watchers" : 3 ,
2023-06-19 15:46:37 +02:00
"score" : 0 ,
"subscribers_count" : 1
2023-05-19 14:30:08 +02:00
} ,
2023-04-25 08:30:50 +02:00
{
"id" : 632273646 ,
"name" : "cve-2021-26855" ,
"full_name" : "iceberg-N\/cve-2021-26855" ,
"owner" : {
"login" : "iceberg-N" ,
"id" : 110767603 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/110767603?v=4" ,
"html_url" : "https:\/\/github.com\/iceberg-N"
} ,
"html_url" : "https:\/\/github.com\/iceberg-N\/cve-2021-26855" ,
"description" : null ,
"fork" : false ,
"created_at" : "2023-04-25T04:29:35Z" ,
"updated_at" : "2023-04-25T04:29:36Z" ,
"pushed_at" : "2023-04-25T04:31:01Z" ,
"stargazers_count" : 0 ,
"watchers_count" : 0 ,
"has_discussions" : false ,
"forks_count" : 0 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 0 ,
"watchers" : 0 ,
2023-06-19 15:46:37 +02:00
"score" : 0 ,
"subscribers_count" : 1
2024-01-05 01:47:56 +01:00
} ,
{
"id" : 739156681 ,
"name" : "testanull-CVE-2021-26855_read_poc.txt" ,
"full_name" : "timb-machine-mirrors\/testanull-CVE-2021-26855_read_poc.txt" ,
"owner" : {
"login" : "timb-machine-mirrors" ,
"id" : 49810875 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/49810875?v=4" ,
"html_url" : "https:\/\/github.com\/timb-machine-mirrors"
} ,
"html_url" : "https:\/\/github.com\/timb-machine-mirrors\/testanull-CVE-2021-26855_read_poc.txt" ,
"description" : "Clone from gist" ,
"fork" : false ,
"created_at" : "2024-01-04T22:48:21Z" ,
"updated_at" : "2024-01-04T22:50:51Z" ,
"pushed_at" : "2024-01-04T22:48:31Z" ,
"stargazers_count" : 0 ,
"watchers_count" : 0 ,
"has_discussions" : false ,
"forks_count" : 0 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 0 ,
"watchers" : 0 ,
"score" : 0 ,
2024-01-06 01:28:37 +01:00
"subscribers_count" : 1
2021-03-03 16:09:26 +01:00
}
]