corpus.blog
56,966 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a08751-cf69-72fa-9cc3-ddf399c4f3d1

A New Attack Surface on MS Exchange Part 1 - ProxyLogon!

blog.orange.tw · published 5 August 2021

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.orange.tw Wayback capture
1blogs citing
First cited
11 Jun 2025
Most recent
11 Jun 2025
Rank this month
not ranked
Links from this post
32
Words captured
4,746

Cited by

Blog
In the post
Date
pylos.co
Attribution With A Pinch of Salt (Typhoon) Read at the source ↗
11 Jun 2025

Links from this post

Link
Host
https://blog.orange.tw/2021/08/proxylogon-a-new-attack-surface-on-ms-exchange-part-1.html
blog.orange.tw
https://blog.orange.tw/2021/08/proxyoracle-a-new-attack-surface-on-ms-exchange-part-2.html
blog.orange.tw
https://blog.orange.tw/2021/08/proxyshell-a-new-attack-surface-on-ms-exchange-part-3.html
blog.orange.tw
https://blog.orange.tw/2022/10/proxyrelay-a-new-attack-surface-on-ms-exchange-part-4.html
blog.orange.tw
https://proxylogon.com/
proxylogon.com
https://twitter.com/thezdi/status/1379467992862449664
twitter.com
https://www.blackhat.com/us-21/briefings/schedule/index.html
blackhat.com
https://www.defcon.org/html/defcon-29/dc-29-speakers.html
defcon.org
https://pwnies.com/winners/
pwnies.com
https://i.blackhat.com/USA21/Wednesday-Handouts/us-21-ProxyLogon-Is-Just-The-Tip-Of-The-Iceberg-A-New-Attack-Surface-On-Microsoft-Exchange-Server.pdf
i.blackhat.com
https://www.youtube.com/watch?v=5mqid-7zp8k
youtube.com
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26855
msrc.microsoft.com
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27065
msrc.microsoft.com
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31196
msrc.microsoft.com
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31195
msrc.microsoft.com
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34473
msrc.microsoft.com
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34523
msrc.microsoft.com
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31207
msrc.microsoft.com
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-33768
msrc.microsoft.com
https://twitter.com/orange_8361/status/1346401788811825153
twitter.com
https://youtu.be/rB255D-wnw0?t=999
youtu.be
https://www.microsoft.com/security/blog/2021/03/25/analyzing-attacks-taking-advantage-of-the-exchange-server-vulnerabilities/
microsoft.com
https://msrc-blog.microsoft.com/2012/03/16/proof-of-concept-code-available-for-ms12-020/
msrc-blog.microsoft.com
https://www.wsj.com/articles/microsoft-probing-whether-leak-played-role-in-suspected-chinese-hack-11615575793
wsj.com
https://msrc-blog.microsoft.com/2017/07/20/englishmansdentist-exploit-analysis/
msrc-blog.microsoft.com
https://en.wikipedia.org/wiki/Equation_Group
en.wikipedia.org
https://www.zerodayinitiative.com/blog/2018/12/19/an-insincere-form-of-flattery-impersonating-users-on-microsoft-exchange
zerodayinitiative.com
Abusing Exchange: One API call away from Domain Admin Read at the source ↗
dirkjanm.io
https://www.zerodayinitiative.com/blog/2020/2/24/cve-2020-0688-remote-code-execution-on-microsoft-exchange-server-through-fixed-cryptographic-keys
zerodayinitiative.com
https://docs.microsoft.com/en-us/exchange/architecture/architecture?view=exchserver-2019
docs.microsoft.com
https://www.blackhat.com/docs/us-17/thursday/us-17-Tsai-A-New-Era-Of-SSRF-Exploiting-URL-Parser-In-Trending-Programming-Languages.pdf
blackhat.com
https://www.youtube.com/watch?v=SvjGMo9aMwE
youtube.com