Exploiting Exchange PowerShell After ProxyNotShell: Part 4 – No Argument Constructor September 26, 2024 / Piotr Bazydło 0 Likes categories / Blog post tags / Microsoft, Exchange, Research
Exploiting Exchange PowerShell After ProxyNotShell: Part 3 – DLL Loading Chain for RCE September 19, 2024 / Piotr Bazydło 0 Likes categories / Blog post tags / Exchange, Microsoft, Research
Exploiting Exchange PowerShell After ProxyNotShell: Part 2 - ApprovedApplicationCollection September 12, 2024 / Piotr Bazydło 0 Likes categories / Blog post tags / Microsoft, Exchange, Research
Exploiting Exchange PowerShell After ProxyNotShell: Part 1 - MultiValuedProperty September 05, 2024 / Piotr Bazydło 0 Likes categories / Blog post tags / Exchange, Research, Microsoft
CVE-2024-30043: Abusing URL Parsing Confusion to Exploit XXE on SharePoint Server and Cloud May 30, 2024 / Piotr Bazydło 0 Likes categories / Blog post tags / SharePoint, Microsoft, Research
Unpatched Powerful SSRF in Exchange OWA – Getting Response Through Attachments November 02, 2023 / Piotr Bazydło 0 Likes categories / Blog post tags / Microsoft, Exchange, 0-day
Control Your Types or Get Pwned: Remote Code Execution in Exchange PowerShell Backend November 16, 2022 / Piotr Bazydło 0 Likes categories / Blog post tags / Exchange, Microsoft, 0-day