🔰Metahttp - A #bash script that automates the scanning of a target network for HTTP resources through #XXE #tools @hacklido
https://github.com/vp777/metahttp
https://github.com/vp777/metahttp
GitHub
GitHub - vp777/metahttp: A bash script that automates the scanning of a target network for HTTP resources through XXE
A bash script that automates the scanning of a target network for HTTP resources through XXE - vp777/metahttp
🔰 #PoC exploits for #CVE -2020-17143 and CVE-2020-17141 which demonstrate the #XXE bugs against Exchange #Server. @hacklido
- Low privileged authentication only
- CVE-2020-17141 is interesting because its in the EWS #API
https://srcincite.io/pocs/cve-2020-17143.py.txt
https://srcincite.io/pocs/cve-2020-17141.py.txt
- Low privileged authentication only
- CVE-2020-17141 is interesting because its in the EWS #API
https://srcincite.io/pocs/cve-2020-17143.py.txt
https://srcincite.io/pocs/cve-2020-17141.py.txt