CVE-2021-26855 SSRF Exchange Server

Last update: Nov 28, 2022

Overview

CVE-2021-26855 Brute Force EMail Exchange Server

Timeline:

Monday, March 8, 2021: Update Dumping content...(I'm not done, can u guy help me done this code ;-;)

Tuesday, March 9, 2021: Remake to simple check valid mail

Wednesday, March 10, 2021: Maybe im done this script, now im waiting true cve pre-auth rce

Sometime, some server extract domain tld is wrong

Download users.txt list from github or u find it with Google Dork: intext:'@domain.ltd'

Shodan

https://beta.shodan.io/search?query=http.component%3A%22outlook+web+app%22
https://beta.shodan.io/search?query=http.html%3A%22%2Fowa%22

Fofa

https://fofa.so/result?q=title%3D%22Outlook+Web+App%22
https://fofa.so/result?q=%22%2Fowa%22&qbase64=Ii9vd2Ei
https://gist.githubusercontent.com/pikpikcu/fb604e01a7555adb1577a2fbc856022d/raw/ef3025f809c6ca87d22f01914b230d35f39c0ac2/fofa%2520dork-CVE-2021-26855.md

Zoomeye

https://www.zoomeye.org/searchResult?q=%2Fowa

Owner

lulz

retarded kid trying to use internet

GitHub Repository

Deobfuscate Log4Shell payloads with ease

Ox4Shell Deobfuscate Log4Shell payloads with ease. Description Since the release

137 Jan 02, 2023

Files related to PoC||GTFO 21:21 - NSA’s Backdoor of the PX1000-Cr

Files related to PoC||GTFO 21:21 - NSA’s Backdoor of the PX1000-Cr 64bit2key.py

15 Nov 26, 2022

Unauthenticated Sqlinjection that leads to dump data base but this one impersonated Admin and drops a interactive shell

Unauthenticated Sqlinjection that leads to dump database but this one impersonated Admin and drops a interactive shell

16 Nov 09, 2022

This repository will contain python scripts for hackers and pentesters

This repository will contain python scripts for hackers and pentesters. stop being limited with availble tools. Build your own.

24 Nov 29, 2022

It is a very simple XSS simulator based on flask, python.

It is a very simple XSS simulator based on flask, python. The purpose of making this is for teaching the concept of XSS.

3 May 10, 2022

On-demand scanning for container registries

Lacework registry scanner Install & configure Lacework CLI Integrate a Container Registry Go to Lacework Resources Containers Container Image In

1 Dec 14, 2021

Password Manager is a simple Python project which helps users in managing their passwords in a easier way

4 Sep 29, 2021

Bypass ReCaptcha: A Python script for dealing with recaptcha

Bypass ReCaptcha Bypass ReCaptcha is a Python script for dealing with recaptcha.

1 Jan 11, 2022

Tools Crack Fb Terbaru

12 Jan 06, 2022

CVE-2021-22986 & F5 BIG-IP RCE

Vuln Impact This vulnerability allows for unauthenticated attackers with network access to the iControl REST interface, through the BIG-IP management

85 Dec 02, 2022

A collection of over 5.1 million sub-domains and assets belonging to public bug bounty programs, compiled into a repo, for performing bulk operations.

📂 Public Bug Bounty Targets Data By BugBountyResources A collection of over 5.1M sub-domains and assets belonging to bug bounty targets, all put in a

87 Dec 13, 2022

CVE-2021-26855 SSRF Exchange Server

Related tags

Overview

CVE-2021-26855 Brute Force EMail Exchange Server

Timeline:

Shodan

Fofa

Zoomeye

Owner

lulz

Deobfuscate Log4Shell payloads with ease

Files related to PoC||GTFO 21:21 - NSA’s Backdoor of the PX1000-Cr

Unauthenticated Sqlinjection that leads to dump data base but this one impersonated Admin and drops a interactive shell

This repository will contain python scripts for hackers and pentesters

It is a very simple XSS simulator based on flask, python.

On-demand scanning for container registries

Password Manager is a simple Python project which helps users in managing their passwords in a easier way

Bypass ReCaptcha: A Python script for dealing with recaptcha

Tools Crack Fb Terbaru

CVE-2021-22986 & F5 BIG-IP RCE

A collection of over 5.1 million sub-domains and assets belonging to public bug bounty programs, compiled into a repo, for performing bulk operations.

CVE-2021-26084 - Confluence Pre-Auth RCE OGNL injection

SSLyze is a fast and powerful SSL/TLS scanning tool and Python library.

CamRaptor is a tool that exploits several vulnerabilities in popular DVR cameras to obtain device credentials.

Cobalt Strike < 4.4 dos CVE-2021-36798

Proof of concept for CVE-2021-24086, a NULL dereference in tcpip.sys triggered remotely.

Genpyteal - Experiment to rewrite Python into PyTeal using RedBaron

Rapidly enumerate subdomains and domains using rapiddns.io.

Pgen is the best brute force password generator and it is improved from the cupp.py

Fast Fb Cracking Tool