hausec/proxylogonPython exploit for ProxyLogon (CVE-2021-26855) targeting Microsoft Exchange servers. Drops a webshell for remote command execution and post-exploitation.
Original PoC: https://github.com/testanull
python proxylogon.py <name or IP of server> <user@fqdn>
python proxylogon.py primary [email protected]
If successful you will be dropped into a webshell. exit or quit to escape from the webshell (or ctrl+c)
By default, it will create a file test.aspx. This can be changed.
This project is not supported but PRs are open :)
@Flangvik @Testanull https://www.praetorian.com/blog/reproducing-proxylogon-exploit/
