The great Microsoft exchange hack: A penetration tester’s guide (exchange penetration testing)
☆145Jul 7, 2026Updated 3 months ago
Alternatives and similar repositories for exchange-penetration-testing
Users that are interested in exchange-penetration-testing are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- [CVE-2017-9822] DotNetNuke Cookie Deserialization Remote Code Execution (RCE)☆22Aug 30, 2020Updated 6 years ago
- leaking net-ntlm with webdav☆28Feb 23, 2021Updated 5 years ago
- ☆27Jan 27, 2022Updated 4 years ago
- A collection of functions to check Microsoft Exchange Servers for ProxyLogon and ProxyShell☆18Sep 3, 2021Updated 5 years ago
- Office 365 and Exchange Enumeration☆205May 7, 2019Updated 7 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- This python script performs a number of sqlite queries (mainly password metadata) against sqlite databases (Created by ROADtools) to prov…☆22Jul 3, 2024Updated 2 years ago
- Pure PowerShell port of PassTheCert tool to authenticate to an LDAP/S server with a certificate through Schannel☆65Apr 13, 2025Updated last year
- Mitigation validation utility for the Ivanti Connect Around attack chain. Runs multiple checks. CVE-2023-46805, CVE-2024-21887.☆12Feb 3, 2024Updated 2 years ago
- MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, i…☆3,290Sep 21, 2026Updated last month
- Reverse TCP Powershell has never been this paranoid. (basically an Opsec-safe reverse powershell)☆30Feb 4, 2022Updated 4 years ago
- Bypass EDR(Endpoint Detection and Response) environment to write Behinder jsp webshell onto webserver☆13Dec 27, 2023Updated 2 years ago
- Proof of Concept for CVE-2021-34473, CVE-2021-34523, and CVE-2021-31207☆121Aug 25, 2023Updated 3 years ago
- A Docker container used to easily compile Nim binaries generated by my tools (NimPackt and NimPlant)☆16Aug 31, 2023Updated 3 years ago
- CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability☆43Jun 30, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A fully featured Windows backdoor that uses email as a C&C server☆16Aug 19, 2017Updated 9 years ago
- ☆64Aug 11, 2023Updated 3 years ago
- Webshell agent in aspx and php☆26Dec 11, 2025Updated 10 months ago
- Office 365 and Exchange Enumeration Version 2☆18Jan 30, 2024Updated 2 years ago
- Bug Hunting Handbook☆12Aug 11, 2022Updated 4 years ago
- A tool to abuse Exchange services☆2,311Jun 10, 2024Updated 2 years ago
- SeImpersonate privilege escalation tool for Windows 8 - 11 and Windows Server 2012 - 2022 with extensive PowerShell and .NET reflection s…☆530May 16, 2024Updated 2 years ago
- a burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi), creates access matrix based user sessions to …☆31Oct 21, 2025Updated last year
- Resources linked to my presentation at OffensiveX in Athens in June 2024 on the topic "Breach the Gat, Advanced Initial Access in 2024"☆151Aug 15, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- RabbitMQ exploit and Pentesting guide for penetration tester☆20Nov 22, 2023Updated 2 years ago
- Automated reconnaissance framework for bug bounty and penetration testing.☆28Oct 3, 2026Updated 3 weeks ago
- BurpSuite extension to convert requests into bcheck scripts☆34Jul 18, 2023Updated 3 years ago
- Zabbix - SAML SSO Authentication Bypass☆15Mar 31, 2022Updated 4 years ago
- Tool for Active Directory Certificate Services enumeration and abuse☆3,707Jul 30, 2026Updated 3 months ago
- ElasticSearch exploit and Pentesting guide for penetration tester☆32Nov 9, 2022Updated 3 years ago
- Repo for hosting rayder workflows☆65Aug 31, 2023Updated 3 years ago
- Simple Linux RootKit written in python☆10Dec 10, 2017Updated 8 years ago
- ☆92Mar 26, 2026Updated 7 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A Python 🐍 script to swiftly lookup CVEs from CPEs, uncovering software vulnerabilities by severity 🔍🛡️☆11Nov 10, 2023Updated 2 years ago
- SCCMHunter is a post-ex tool built to streamline identifying, profiling, and attacking SCCM related assets in an Active Directory domain.…☆959Updated this week
- CVE-2025-31324, SAP Exploit☆25Apr 28, 2025Updated last year
- ☆39Oct 21, 2026Updated last week
- Fun GUI for Group3rs output log☆36Aug 14, 2023Updated 3 years ago
- My personal collection of nuclei templates made for fuzzing.☆29Sep 6, 2024Updated 2 years ago
- Powershell tool to automate Active Directory enumeration.☆1,379Updated this week