CVE-2020-0688

CVE-2020-0688_Microsoft Exchange padrão MachineKeySection vulnerabilidade de desserialização

---

Instrução de Instalação:

• Download usando git (Requer git): git clone https://github.com/7heKnight/CVE-2020-0688
• Download do arquivo Zip: https://github.com/7heKnight/CVE-2020-0688/archive/refs/heads/main.zip
• pip install urllib3 requests

Usage: python poc.py -s <Server/ip> (Required) -u username (Required) -p password (Required) --proxy (Not Require)

Options:
  -h, --help       show this help message and exit
  -s SERVER        Exchange mail Server URL Example: http://ip/owa
  -u USER          Login account Example: domain\user
  -p PASSWORD      Password
  -c COMMAND       Using Command and get output from web's respond
  --upload=UPLOAD  Upload file and print respond the file location uploaded
  --proxy=PROXY    Proxy to use. Example: https://127.0.0.1:8080 (Support Only
                   HTTP and HTTPS)