CVE-2021-33766 PoC — Microsoft Exchange Server Information Disclosure Vulnerability

Source

https://github.com/demossl/CVE-2021-33766-ProxyToken

Associated Vulnerability

Title: Microsoft Exchange Server Information Disclosure Vulnerability (CVE-2021-33766)
Description:Microsoft Exchange Server Information Disclosure Vulnerability

Description

CVE-2021-33766-poc

Readme

## CVE-2021-33766 (ProxyToken)

支持单个目标检测和批量检测、支持邮件转发规则修改

### 用法

漏洞检测以及邮件转发规则修改

![1](images/1.png)

邮件转发规则修改结果 ![2](images/2.png)

邮件发送测试![3](images/3.png)

### 参考

https://www.zerodayinitiative.com/blog/2021/8/30/proxytoken-an-authentication-bypass-in-microsoft-exchange-server

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →