Exploiting Exchange PowerShell After ProxyNotShell: Part 4 – No Argument Constructor September 26, 2024 / Piotr Bazydło 0 Likes categories / Blog post tags / Microsoft, Exchange, Research
Exploiting Exchange PowerShell After ProxyNotShell: Part 3 – DLL Loading Chain for RCE September 19, 2024 / Piotr Bazydło 0 Likes categories / Blog post tags / Exchange, Microsoft, Research
Exploiting Exchange PowerShell After ProxyNotShell: Part 2 - ApprovedApplicationCollection September 12, 2024 / Piotr Bazydło 0 Likes categories / Blog post tags / Microsoft, Exchange, Research
Exploiting Exchange PowerShell After ProxyNotShell: Part 1 - MultiValuedProperty September 05, 2024 / Piotr Bazydło 0 Likes categories / Blog post tags / Exchange, Research, Microsoft
Unpatched Powerful SSRF in Exchange OWA – Getting Response Through Attachments November 02, 2023 / Piotr Bazydło 0 Likes categories / Blog post tags / Microsoft, Exchange, 0-day
Control Your Types or Get Pwned: Remote Code Execution in Exchange PowerShell Backend November 16, 2022 / Piotr Bazydło 0 Likes categories / Blog post tags / Exchange, Microsoft, 0-day
The Top 5 Bugs Submitted in 2021 January 06, 2022 / Simon Zuckerbraun 0 Likes categories / Blog post tags / Top 5, Microsoft, Linux, Exchange, Safari
ProxyToken: An Authentication Bypass in Microsoft Exchange Server August 30, 2021 / Simon Zuckerbraun 0 Likes categories / Blog post tags / Microsoft, Exchange, Exploit
From Pwn2Own 2021: A New Attack Surface on Microsoft Exchange - ProxyShell! August 18, 2021 / Guest Blogger 0 Likes categories / Blog post tags / Exchange, Pwn2Own, Research
CVE-2020-0688: Remote Code Execution on Microsoft Exchange Server Through Fixed Cryptographic Keys February 25, 2020 / Simon Zuckerbraun 0 Likes categories / Blog post tags / Microsoft, Exchange, Exploit