This is a cross-post blog from DEVCORE. You can check the series on:
A New Attack Surface on MS Exchange Part 1 - ProxyLogon!
A New Attack Surface on MS Exchange Part 2 - ProxyOracle!
A New Attack Surface on MS Exchange Part 3 - ProxyShell!
A New Attack Surface on MS Exchange Part 4 - ProxyRelay!
Hi, this is a long-time-pending article. We could
Author: Orange Tsai(@orange_8361) from DEVCORE
P.S. This is a cross-post blog from Zero Day Initiative (ZDI)
This is a guest post DEVCORE collaborated with Zero Day Initiative (ZDI) and published at their blog, which describes the exploit chain we demonstrated at Pwn2Own 2021! Please visit the following link to read that :)FROM PWN2OWN 2021
Author: Orange Tsai(@orange_8361)
P.S. This is a cross-post blog from DEVCORE
Hi, this is the part 2 of the New MS Exchange Attack Surface. Because this article refers to several architecture introductions and attack surface concepts in the previous article, you could find the first piece here:
A New Attack Surface on MS Exchange Part 1
