Sploitus

Exploit for Zirconium

CVE-2021-26855CVE-2021-26857CVE-2021-26958

kitploit · 2026-08-27

Exploit Code

MARKDOWN25 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-BYINARIE-ZIRCONIUM
![Copy of site photo temp \(18\)](https://assets.kitploit.com/production/public/readmes/52010/553f6802c46bb4c2f9fa4f27c57366a67685c3d869eaf798bffb775a3d7c0c2a/84684beae2339c5ee5aba6a81691aaf358316e8b9a05863b72e7e445d41c84fc-display-v1.webp)

# ZIRCONIUM

ZIRCONIUM has been created to scan for Indicators of Compromise (IOCs) on Exchange Servers for signs of Zero-Day exploits used by HAFNIUM.

ZIRCONIUM will search for:

  * CVE-2021-26855
  * CVE-2021-26958
  * CVE-2021-26857
  * CVE-2021-27027065
  * Suspicious .dmp Files
  * .aspnet Files Found in inetpub and Exchange File Paths



## Usage

Download the lastest version of ZIRCONIUM: https://github.com/SpearTip-Cyber-Counterintelligence/Zirconium/releases/download/1.0/Zirconium.exe

Move the latest version of ZIRCONIUM to your desktop and double click the application to start. ZIRCONIUM will begin to scan the system, outputting notification balloons to the bottom right-hand corner of the screen.

Once ZIRCONIUM has completed its scan, you will find a .txt file on your desktop labeled "ZIRCONIUM-Info.txt" that contains any information the application has found, including possible compromise, bad filepaths, etc.