CVE-2023-21707 PoC — Microsoft Exchange Server 安全漏洞

Source

https://github.com/N1k0la-T/CVE-2023-21707

Associated Vulnerability

Title:Microsoft Exchange Server 安全漏洞 (CVE-2023-21707)
Description:Microsoft Exchange Server是美国微软（Microsoft）公司的一套电子邮件服务程序。它提供邮件存取、储存、转发，语音邮件，邮件过滤筛选等功能。 Microsoft Exchange Server存在安全漏洞。以下产品和版本受到影响：Microsoft Exchange Server 2016 Cumulative Update 23,Microsoft Exchange Server 2019 Cumulative Update 12,Microsoft Exchange Ser

Description

CVE-2023-21707 EXP

Readme

# CVE-2023-21707

Exchange 反序列化payload生成
```shell
.\ConsoleApp1.exe "calc"
```

File Snapshot


 [4.0K]  /data/pocs/6a16af7f21693708bc5dfda63f7ee108868c8697
├── [4.0K]  ConsoleApp1
│   ├── [4.0K]  ConsoleApp1
│   │   ├── [ 178]  App.config
│   │   ├── [4.0K]  bin
│   │   │   ├── [4.0K]  Debug
│   │   │   │   ├── [8.0K]  ConsoleApp1.exe
│   │   │   │   ├── [1.2K]  ConsoleApp1.exe.config
│   │   │   │   ├── [ 28K]  ConsoleApp1.pdb
│   │   │   │   ├── [4.8M]  Microsoft.Exchange.Net.dll
│   │   │   │   └── [926K]  Microsoft.WindowsAzure.Storage.dll
│   │   │   └── [4.0K]  Release
│   │   │       ├── [ 47K]  ConsoleApp1.exe
│   │   │       ├── [1.2K]  ConsoleApp1.exe.config
│   │   │       ├── [ 28K]  ConsoleApp1.pdb
│   │   │       ├── [4.8M]  Microsoft.Exchange.Net.dll
│   │   │       └── [926K]  Microsoft.WindowsAzure.Storage.dll
│   │   ├── [ 796]  Class1.cs
│   │   ├── [ 952]  Class2.cs
│   │   ├── [ 743]  Class3.cs
│   │   ├── [2.7K]  ConsoleApp1.csproj
│   │   ├── [4.0K]  obj
│   │   │   ├── [4.0K]  Debug
│   │   │   │   ├── [7.3K]  ConsoleApp1.csproj.AssemblyReference.cache
│   │   │   │   ├── [   0]  ConsoleApp1.csproj.CopyComplete
│   │   │   │   ├── [  41]  ConsoleApp1.csproj.CoreCompileInputs.cache
│   │   │   │   ├── [ 873]  ConsoleApp1.csproj.FileListAbsolute.txt
│   │   │   │   ├── [8.0K]  ConsoleApp1.exe
│   │   │   │   ├── [1.2K]  ConsoleApp1.exe.config
│   │   │   │   ├── [ 28K]  ConsoleApp1.pdb
│   │   │   │   └── [6.7K]  DesignTimeResolveAssemblyReferencesInput.cache
│   │   │   └── [4.0K]  Release
│   │   │       ├── [ 14K]  ConsoleApp1.csproj.AssemblyReference.cache
│   │   │       ├── [   0]  ConsoleApp1.csproj.CopyComplete
│   │   │       ├── [  41]  ConsoleApp1.csproj.CoreCompileInputs.cache
│   │   │       ├── [ 895]  ConsoleApp1.csproj.FileListAbsolute.txt
│   │   │       ├── [ 47K]  ConsoleApp1.exe
│   │   │       ├── [1.2K]  ConsoleApp1.exe.config
│   │   │       └── [ 28K]  ConsoleApp1.pdb
│   │   ├── [2.0K]  Program.cs
│   │   └── [4.0K]  Properties
│   │       └── [1.2K]  AssemblyInfo.cs
│   └── [1.1K]  ConsoleApp1.sln
├── [ 905]  CVE-2023-21707.py
└── [  91]  README.md

9 directories, 35 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!