corpus.blog
56,966 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a08751-cf69-72fa-9cc3-ddf397c9f39f

A New Attack Surface on MS Exchange Part 4 - ProxyRelay!

blog.orange.tw · published 18 October 2022

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.orange.tw Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
45
Words captured
2,814

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://devco.re/blog/
devco.re
https://blog.orange.tw/2021/08/proxylogon-a-new-attack-surface-on-ms-exchange-part-1.html
blog.orange.tw
https://blog.orange.tw/2021/08/proxyoracle-a-new-attack-surface-on-ms-exchange-part-2.html
blog.orange.tw
https://blog.orange.tw/2021/08/proxyshell-a-new-attack-surface-on-ms-exchange-part-3.html
blog.orange.tw
https://blog.orange.tw/2022/10/proxyrelay-a-new-attack-surface-on-ms-exchange-part-4.html
blog.orange.tw
https://support.microsoft.com/en-au/topic/cumulative-update-12-for-exchange-server-2019-kb5011156-6a4e598a-876c-4ff1-9cfa-f7b87246f1d8
support.microsoft.com
https://support.microsoft.com/en-us/topic/cumulative-update-23-for-exchange-server-2016-kb5011155-98183ada-e4cd-465f-b201-69d40fb74678
support.microsoft.com
https://www.zerodayinitiative.com/blog/2022/1/12/pwn2own-vancouver-2022-luanch
zerodayinitiative.com
https://devco.re/en/about/
devco.re
https://powerofcommunity.net/2021.htm
powerofcommunity.net
https://hitcon.org/2021/agenda/279d7810-e619-4dc3-9113-b11bad5277ec/
hitcon.org
https://doublepulsar.com/proxynotshell-the-story-of-the-claimed-zero-day-in-microsoft-exchange-5c63d963a9e9
doublepulsar.com
https://www.thehacker.recipes/ad/movement/mitm-and-coerced-authentications/ms-rprn
thehacker.recipes
https://twitter.com/tifkin_
twitter.com
https://twitter.com/harmj0y
twitter.com
https://twitter.com/enigma0x3
twitter.com
https://www.slideshare.net/harmj0y/derbycon-the-unintended-risks-of-trusting-active-directory
slideshare.net
https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-rprn/d42db7d5-f141-4466-8f47-0a4be14e2fc1
docs.microsoft.com
https://twitter.com/D1iv3
twitter.com
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-33768
msrc.microsoft.com
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21979
msrc.microsoft.com
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26414
msrc.microsoft.com
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24477
msrc.microsoft.com
https://github.com/dirkjanm/krbrelayx/blob/master/printerbug.py
github.com
https://github.com/SecureAuthCorp/impacket/blob/master/examples/ntlmrelayx.py
github.com
https://github.com/SecureAuthCorp/impacket/blob/master/impacket/examples/ntlmrelayx/attacks/httpattack.py
github.com
https://docs.microsoft.com/en-us/exchange/client-developer/web-service-reference/ews-operations-in-exchange
docs.microsoft.com
https://learn.microsoft.com/en-us/exchange/outlook-anywhere-exchange-2013-help
learn.microsoft.com
https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-rpch/c0f4c9c5-1a61-4d10-b8e2-005378d1d212
docs.microsoft.com
https://swarm.ptsecurity.com/attacking-ms-exchange-web-interfaces/
swarm.ptsecurity.com
https://twitter.com/_mohemiv
twitter.com
https://github.com/sensepost/ruler
github.com
https://github.com/SecureAuthCorp/impacket
github.com
https://docs.microsoft.com/en-us/openspecs/exchange_server_protocols/ms-oxcrpc/137f0ce2-31fd-4952-8a7d-6c0b242e4b6a
docs.microsoft.com
https://docs.microsoft.com/en-us/openspecs/exchange_server_protocols/ms-oxcrops/13af6911-27e5-4aa0-bb75-637b02d4f2ef
docs.microsoft.com
https://srcincite.io/advisories/src-2020-0019/
srcincite.io
https://srcincite.io/advisories/src-2020-0025/
srcincite.io
https://x41-dsec.de/security/advisory/exploit/research/2020/12/21/x41-microsoft-exchange-rce-dlp-bypass/
x41-dsec.de
https://www.zerodayinitiative.com/blog/2021/8/17/from-pwn2own-2021-a-new-attack-surface-on-microsoft-exchange-proxyshell
zerodayinitiative.com
https://msrc-blog.microsoft.com/2009/12/08/extended-protection-for-authentication/
msrc-blog.microsoft.com
https://twitter.com/sploutchy
twitter.com
Relaying NTLM authentication over RPC Read at the source ↗
blog.compass-security.com
https://www.youtube.com/watch?v=7h38rI8KT30
youtube.com
https://media.defcon.org/DEF%20CON%2029/DEF%20CON%2029%20presentations/Tianze%20Ding%20-%20Vulnerability%20Exchange%20-%20One%20Domain%20Account%20For%20More%20Than%20Exchange%20Server%20RCE.pdf?page=45
media.defcon.org
https://techcommunity.microsoft.com/t5/exchange-team-blog/released-august-2022-exchange-server-security-updates/ba-p/3593862
techcommunity.microsoft.com