CVE-2020-0688 PoC — Microsoft Exchange Server 授权问题漏洞

Source

https://github.com/righter83/CVE-2020-0688

Associated Vulnerability

Title: Microsoft Exchange Server 授权问题漏洞 (CVE-2020-0688)
Description:A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.

Description

Exchange Scanner CVE-2020-0688

Readme

# CVE-2020-0688 Scanner
This is a little dirty Script to Check for vulnerables Exchange Servers by CVE-2020-0688
It's written ugly and in PHP. 
Caution: It only checks if you have the actual CU update installed. That doesn't mean that you have installed the bugfix patch!

### Requirements
You need php-cli and php-curl       

### Usage
First clone the repo:
```
git clone https://github.com/righter83/CVE-2020-0688
```

Scan a single server (without https://)
```
php scanner.php mail.cust.ch
```

Scan a whole IP Range
```
php scanner.php 1.1.1.0/24
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →