A New Attack Surface on MS Exchange Part 1 - ProxyLogon! | DEVCORE 戴夫寇爾
Tags
Common Information
| Type | Value |
|---|---|
| UUID | 24019abe-47b8-4ec6-9127-2eea10c3dec8 |
| Fingerprint | b719985fafe57463 |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | Aug. 6, 2021, midnight |
| Added to db | Aug. 31, 2024, 1:27 a.m. |
| Last updated | Nov. 17, 2024, 5:55 p.m. |
| Headline | BLOG |
| Title | A New Attack Surface on MS Exchange Part 1 - ProxyLogon! | DEVCORE 戴夫寇爾 |
| Detected Hints/Tags/Attributes | 53/1/25 |
Source URLs
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 102 | ✔ | DEVCORE 戴夫寇爾 | https://devco.re/rss | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | File | 1 | base.log |
|
| Details | File | 15 | x.js |
|
| Details | File | 1 | writefileactivity.cs |
|
| Details | IPv4 | 619 | 0.0.0.0 |
|
| Details | CVE | 184 | cve-2021-26855 |
|
| Details | CVE | 126 | cve-2021-27065 |
|
| Details | CVE | 11 | cve-2021-31196 |
|
| Details | CVE | 8 | cve-2021-31195 |
|
| Details | CVE | 168 | cve-2021-34473 |
|
| Details | CVE | 142 | cve-2021-34523 |
|
| Details | CVE | 143 | cve-2021-31207 |
|
| Details | CVE | 7 | cve-2021-33768 |
|
| Details | CVE | 11 | cve-2018-8581 |
|
| Details | CVE | 71 | cve-2020-0688 |
|
| Details | Domain | 1 | serverrequest.address.host |
|
| Details | Domain | 1 | clienturlforproxy.host |
|
| Details | Domain | 831 | example.com |
|
| Details | Domain | 15 | file.open |
|
| Details | File | 1 | proxyrequesthandler.cs |
|
| Details | File | 1 | kerberosutilities.cs |
|
| Details | File | 1 | authenticationcontext.ini |
|
| Details | File | 1 | backendrehydrationmodule.cs |
|
| Details | File | 30 | this.log |
|
| Details | File | 1 | urlanchormailbox.url |
|
| Details | File | 1 | owaresourceproxyrequesthandler.cs |