Awesome

Proxyshell-Scanner

nuclei scanner for Proxyshell RCE (CVE-2021-34423,CVE-2021-34473,CVE-2021-31207) discovered by orange tsai in Pwn2Own, which affect microsoft exchange server.

POC

alt text

Resource

<br>https://blog.orange.tw/2021/08/proxylogon-a-new-attack-surface-on-ms-exchange-part-1.html <br>https://blog.orange.tw/2021/08/proxyoracle-a-new-attack-surface-on-ms-exchange-part-2.html <br>https://peterjson.medium.com/reproducing-the-proxyshell-pwn2own-exploit-49743a4ea9a1