Record · praetorian.com
Reproducing the Microsoft Exchange Proxylogon Exploit Chain
Praetorian · 9 March 2021 · 17 min read
A post on praetorian.com, published 9 March 2021, is cited by 2 distinct blogs to date (corpus.blog, measured 13 October 2026).
A record is what was published and who pointed at it. The text of the post is not shown here: read it at the source, or at its Wayback capture.
2blogs citing
| Period | Blogs | Links |
|---|---|---|
| All time | 2 | 2 |
| Last 90 days | 0 | 0 |
| Last 30 days | 0 | 0 |
| Last 7 days | 0 | 0 |
| First cited | 21 Mar 2021 |
|---|---|
| Latest citation | 22 Jun 2022 |
| Words blogs link it with | 2 |
| External links | 34 |
| Length | 3,905 |
Words blogs link it with
The words blogs link this page with, by how many different blogs use them.
- poc exploit1 blog
- while reading the wonderful reproducing proxylogon exploit by praetorian1 blog
Cited by 2 blogs in 2 posts
One row per blog, the most recently citing first. Each shows the blog's newest citing post; open a row for the others.
Blog
Newest citing post
Date
Sophos News1 post
Active Adversary Playbook 2022 Insights: Web Shells
linked as “POC exploit”
Read at sophos.com (opens in a new tab)22 Jun 2022
x64.sh1 post
The NTLM Exchange
linked as “While reading the wonderful reproducing proxylogon exploit by Praetorian”
Read at x64.sh (opens in a new tab)21 Mar 2021
Links from this post
Link
Host
https://msrc-blog.microsoft.com/2021/03/05/microsoft-exchange-server-vulnerabilities-mitigations-march-2021/ Who cites this page
msrc-blog.microsoft.com
catalog.update.microsoft.com
https://www.catalog.update.microsoft.com/Search.aspx?q=Security%20Update%20For%20Exchange%20Server%202013%20CU23 Who cites this page
catalog.update.microsoft.com
https://docs.microsoft.com/en-us/powershell/module/addsdeployment/?view=win10-ps Who cites this page
docs.microsoft.com
https://docs.microsoft.com/en-us/exchange/plan-and-deploy/deploy-new-installations/create-azure-test-environments?view=exchserver-2019 Who cites this page
docs.microsoft.com
docs.microsoft.com
https://www.blackhat.com/docs/us-17/thursday/us-17-Munoz-Friday-The-13th-JSON-Attacks-wp.pdf Who cites this page
blackhat.com
https://media.blackhat.com/bh-us-12/Briefings/Forshaw/BH_US_12_Forshaw_Are_You_My_Type_WP.pdf Who cites this page
media.blackhat.com
https://www.crowdstrike.com/blog/falcon-complete-stops-microsoft-exchange-server-zero-day-exploits/ Who cites this page
crowdstrike.com
https://docs.microsoft.com/en-us/previous-versions/tn-archive/aa996225(v=exchg.65 Who cites this page
docs.microsoft.com
https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-rpch/d49bfc93-1e8c-4741-ba49-56067e56314b Who cites this page
docs.microsoft.com
https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-nlmp/801a4681-8809-4be9-ab0d-61dcfe762786 Who cites this page
docs.microsoft.com
https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-nlmp/b34032e5-3aae-4bc6-84c3-c6d80eadf7f2 Who cites this page
docs.microsoft.com
https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-nlmp/83f5e789-660d-4781-8491-5f8c6641f75e Who cites this page
docs.microsoft.com
github.com
docs.microsoft.com
trimarcsecurity.com
devco.re
volexity.com
twitter.com
crowdstrike.com
microsoft.com
Something wrong here? Report a problem