the metasploit script(POC) about CVE-2022-41040. Microsoft Exchange are vulnerable to a server-side request forgery (SSRF) attack. An authenticated attacker can use the vulnerability to elevate privileges.
☆35Oct 20, 2022Updated 3 years ago
Alternatives and similar repositories for CVE-2022-41040-metasploit-ProxyNotShell
Users that are interested in CVE-2022-41040-metasploit-ProxyNotShell are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PoC for the CVE-2022-41080 , CVE-2022-41082 and CVE-2022-41076 Vulnerabilities Affecting Microsoft Exchange Servers☆92Jan 10, 2023Updated 3 years ago
- Exploit POC code for CVE-2022-31898, a command injection for GL-iNet routers with firmware below 3.215☆18Nov 17, 2022Updated 3 years ago
- ☆12Dec 24, 2025Updated 9 months ago
- CVE-2022-37042 Zimbra Auth Bypass leads to RCE☆28Dec 9, 2022Updated 3 years ago
- A wrapper of ldap_shell.py module which in ntlmrelayx☆62Sep 22, 2022Updated 4 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- An authentication bypass using an alternate path or channel in Fortinet product☆14Oct 27, 2022Updated 3 years ago
- CVEs <--> Metasploit-Framework modules☆25Aug 25, 2026Updated last month
- CVE-2022-39197 RCE POC☆13Oct 22, 2022Updated 3 years ago
- Document Automation Reference Kit☆16Jun 27, 2024Updated 2 years ago
- Cobalt Strike RCE CVE-2022-39197☆17Sep 25, 2022Updated 4 years ago
- An extension of the sigma standard to include security metrics.☆17May 18, 2023Updated 3 years ago
- Apahce-Superset身份认证绕过漏洞(CVE-2023-27524)检测工具☆11Aug 3, 2023Updated 3 years ago
- CVE-2022-41040 - Server Side Request Forgery (SSRF) in Microsoft Exchange Server☆90Jan 21, 2023Updated 3 years ago
- A C2 Framework developed as an FYP☆12Feb 15, 2026Updated 8 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆92Feb 9, 2023Updated 3 years ago
- Deliver an extensive "fuck you" to whoever is trying to get into your server.☆17Apr 12, 2022Updated 4 years ago
- ☆13Dec 22, 2020Updated 5 years ago
- Packet Sniffer with capabilities to sniff raw tcp, udp, http, icmp, ftp, ssh, sftp packets and filter them using berkley filters☆15Dec 29, 2025Updated 9 months ago
- Interactive Shells like PsExec, but in Go☆16Apr 30, 2025Updated last year
- CVE-2022-31705 (Geekpwn 2022 Vmware EHCI OOB) POC☆119Jan 9, 2023Updated 3 years ago
- Nmapurls parses Nmap xml reports from either piped input or command line arg and outputs a list of http(s) URL's to be used in an automat…☆46Jun 15, 2025Updated last year
- A PoC executing shellcode in Dart☆15Jun 28, 2022Updated 4 years ago
- If you only have hash, you can still operate exchange☆77Oct 21, 2021Updated 4 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆13Mar 22, 2021Updated 5 years ago
- POC for CVE-2022-47966 affecting multiple ManageEngine products☆130Jan 19, 2023Updated 3 years ago
- 向TSRC投稿 的文章，对应的pdf，代码和思维导图☆21Sep 18, 2020Updated 6 years ago
- PoC for CVE-2023-20126☆24Jun 20, 2023Updated 3 years ago
- 一款可以批量验证邮箱有效性和批量枚举邮箱的工具，适用于寻找有效邮箱。☆17Jan 11, 2023Updated 3 years ago
- Redis 沙盒逃逸（CVE-2022-0543）POC&EXP☆23Jul 23, 2022Updated 4 years ago
- 支持常见webshell流量一键解密(完美兼容php)、AES专项解密(内置50wKey爆破)、各类单项解密(Base64、Rot13、strRev、Chr等)、自定义Js解密 Support common websh…☆36Mar 23, 2024Updated 2 years ago
- Finds Domain Controller on a network, enumerates users, AS-REP Roasting and hash cracking, bruteforces password, dumps AD users, DRSUAPI,…☆18Sep 23, 2023Updated 3 years ago
- POC for RCE using vulnerabilities described in VMSA-2023-0001☆146Jan 31, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Python3 script to quickly get various information from a domain controller through his LDAP service.☆14Jan 4, 2022Updated 4 years ago
- 🔥 ICPR 2026 (Lyon, France) - P2.T4☆21Oct 1, 2026Updated 2 weeks ago
- Exchange ProxyRelay POC☆37Oct 20, 2022Updated 3 years ago
- ☆412Nov 18, 2022Updated 3 years ago
- 根据攻防以及域信息收集经验dump快而有用的域信息☆101Aug 15, 2023Updated 3 years ago
- MySQL JDBC Deserialization Payload / MySQL客户端jdbc反序列化漏洞payload☆13Feb 8, 2020Updated 6 years ago
- jmx未授权访问 弱口令批量检测 GUI工具☆30Apr 28, 2023Updated 3 years ago