ProxyLogon Full Exploit Chain PoC (CVE-2021–26855, CVE-2021–26857, CVE-2021–26858, CVE-2021–27065)

A fast tool to mass scan for a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin (CVE-2021-26855).

ProxyLogon(CVE-2021-26855+CVE-2021-27065) Exchange Server RCE(SSRF->GetWebShell)

Akonadi resource agent for Microsoft Exchange using Exchange Web Services (EWS) protocol

CVE-2022-41040 - Server Side Request Forgery (SSRF) in Microsoft Exchange Server

Resource reservation and management app and API

Nmap script to detect a Microsoft Exchange instance version with OWA enabled.

Synapse: a Meta Alert Feeder for TheHive, a Security Incident Response Platform

Primitive Thunderbird plugin for communicating with MS Exchange via Exchange Web Services (EWS)

This script helps to identify CVE-2021-26855 ssrf Poc

This repository contains a number of scripts that i have written or refactored to enhance it's performance. All the scripts are meant to make a day-to-day life easier for a Microsoft system administrator.

Solita Rooms is a web application which can be used to view Microsoft Exchange room bookings.

Exploiting: CVE-2021-41349

Python script that normalizes a URL that has been rewritten by Microsoft ATP SafeLink protection.

CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065

Office 365 Graph Managed API - Rich library for interacting with Microsoft Graph.

Cleanup tool for Microsoft Exchange mailbox. Easy delete e-mails from MS Exchange Server (with backup/export messages to .eml files).

FlexiMail is a robust, test-driven C# library tailored specifically for seamless email integration using Microsoft Exchange Web Services (EWS).

Microsoft Exchange mailbox export script as a scheduled task.

A menu-based toolbox built in Powershell to efficiently perform Admin Tasks for Mailboxes and Calendars for Service Desk Analysts and Deskside Engineers in Microsoft Exchange