New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Question: Does the NSE script already test for the latest bypass? #2

Open

certrik opened this issue Oct 11, 2022 · 1 comment

certrik commented Oct 11, 2022

Hi,

does the script also test the latest bypass which was fixed on the 8th of October?
https://msrc-blog.microsoft.com/2022/09/29/customer-guidance-for-reported-zero-day-vulnerabilities-in-microsoft-exchange-server/

Thank you.

Author

certrik commented Oct 13, 2022

@CronUp @LuemmelSec
Looking at https://doublepulsar.com/proxynotshell-the-story-of-the-claimed-zero-day-in-microsoft-exchange-5c63d963a9e9
payload_bypass3 = "/autodiscover/autodiscover.json?a..foo.var/owa/?&Email=autodiscover/autodiscover.json?a..foo.var&Protocol=XYZ&FooProtocol=%50owershell/autodiscover.json" would do the trick, if I am right.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment