CVE-2020-0688 PoC — Microsoft Exchange Server 授权问题漏洞

Source

https://github.com/truongtn/cve-2020-0688

Associated Vulnerability

Title: Microsoft Exchange Server 授权问题漏洞 (CVE-2020-0688)
Description:A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.

Description

I made this script for conducting CVE-2020-0688 more rapidly. It helps to improve checking the vuln, reducing hugely steps for that

Readme

# cve-2020-0688
I made this script for conducting CVE-2020-0688 more rapidly. It helps to improve checking the vuln, reducing hugely steps for that.\
Modify these inputs before running the file.\
url = "https://mail.something.com" #input 1*\
command = "cmd /c echo OOOPS!!! > c:/truongtn.txt" #input2*\
aspsession = "1111a11c-11ad-1c11-1111-1111122f5977"  # input3*\

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →