CVE-2020-0688 PoC — Microsoft Exchange Server 授权问题漏洞

Description

Exploit and detect tools for CVE-2020-0688

介绍

## Exploit and detect tools for CVE-2020-0688(Microsoft Exchange default MachineKeySection deserialize vulnerability)

### build

	csc ExchangeCmd.cs
	csc ExchangeDetect.cs

### usage
	ExchangeDetect <target> <user> <pass>

 ![](https://raw.githubusercontent.com/zcgonvh/CVE-2020-0688/master/detect.png)
 
	ExchangeCmd <target> <user> <pass>
	sub commands:
		exec <cmd> [args]
		  exec command
			
		arch
		  get remote process architecture(for shellcode)
			
		shellcode <shellcode.bin>
		  run shellcode
			
		exit
		  exit program
![](https://raw.githubusercontent.com/zcgonvh/CVE-2020-0688/master/exp.png)

for more information, read [writeup.pdf](https://raw.githubusercontent.com/zcgonvh/CVE-2020-0688/master/writeup.pdf)(in chinese).

文件快照

备注