Exploit for Improper Authentication in Microsoft

## https://sploitus.com/exploit?id=DF10E063-2D13-5FCD-9C15-28CAF630ECBD
## Exploit and detect tools for CVE-2020-0688(Microsoft Exchange default MachineKeySection deserialize vulnerability)

### build

	csc ExchangeCmd.cs
	csc ExchangeDetect.cs

### usage
	ExchangeDetect   

 ![](https://raw.githubusercontent.com/zcgonvh/CVE-2020-0688/master/detect.png)
 
	ExchangeCmd   
	sub commands:
		exec  [args]
		  exec command
			
		arch
		  get remote process architecture(for shellcode)
			
		shellcode 
		  run shellcode
			
		exit
		  exit program
![](https://raw.githubusercontent.com/zcgonvh/CVE-2020-0688/master/exp.png)

for more information, read [writeup.pdf](https://raw.githubusercontent.com/zcgonvh/CVE-2020-0688/master/writeup.pdf)(in chinese).