CVE-2020-0688 PoC — Microsoft Exchange Server 授权问题漏洞

Source

https://github.com/chudamax/CVE-2020-0688-Exchange2010

Associated Vulnerability

Title: Microsoft Exchange Server 授权问题漏洞 (CVE-2020-0688)
Description:A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.

Description

CVE-2020-0688 modified exploit for Exchange 2010

Readme

The main issue with Exchange2010 that it's .net 2.0 based and generic deserialization gadgets do not work.

All credits goes to zcgonvh and EazyLov3. 

The project is just a combination of:
* https://github.com/zcgonvh/CVE-2020-0688/
* https://www.buaq.net/go-41757.html

How to execute:
* compile
* run Exch2010.exe 192.168.68.110 domain\user P@ssw0rd
* run ExchangeCmd.exe 192.168.68.110 domain\user P@ssw0rd

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →