CVE-2020-0688 PoC — Microsoft Exchange Server 授权问题漏洞

Source

https://github.com/w4fz5uck5/cve-2020-0688-webshell-upload-technique

Associated Vulnerability

Title: Microsoft Exchange Server 授权问题漏洞 (CVE-2020-0688)
Description:A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.

Description

cve-2020-0688 UNIVERSAL Python implementation utilizing ASPX webshell for command output

Readme

# Exchange Remote Code Execution (cve-2020-0688) - RED TEAM [MODE ON]

require: python3+

[UNIVERSAL] Python implementation for (cve-2020-0688), utilizing ASPX webshell for custom command output

This just a POC to facilitate vulnerability demostrations for security reasons. 
I disapprove every illegal actions, and i'm not responsible for any actions what this script does. 

![Alt text](./poc.png)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →