PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Attacking MS Exchange Web Interfaces

swarm.ptsecurity.com | research | #pentesting | #vulnerability-research | #active-directory | #ldap | #ms-exchange | #autodiscover
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Positive Technologies catalogs techniques for attacking MS Exchange web interfaces, from user enumeration via Autodiscover to a new tool that extracts arbitrary Active Directory (LDAP) records.
Published
Collected

Related coverage

blog · netspi.com
Running LAPS Around Cleartext Passwords
Explains how Microsoft LAPS stores local admin passwords in LDAP, and how incorrect delegation on ms-MCS-AdmPwd can expose cleartext credentials that aid lateral movement.
blog · netspi.com
Faster Domain Escalation using LDAP
Shows how to find systems where Domain Admins are likely logged in by querying the ServicePrincipalName attribute over LDAP, with a PowerShell module to automate the process.
research · swarm.ptsecurity.com
Exploiting Arbitrary Object Instantiations in PHP without Custom Classes
A pentest found an unauthenticated Arbitrary Object Instantiation flaw in LAM (LDAP Account Manager) 5.5; with no custom classes available, it was still escalated to remote code execution.
research · blog.quarkslab.com
State of Post-Quantum Cryptography implementations
In this blogpost, we first review the landscape of Post-Quantum Cryptography implementations across some of the most popular cryptographic libraries. Following that, we present the results of a differential fuzzing campaign on few of the presented implementations.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · projectdiscovery.io
PHP2Shell: finding and patching affected PHP
Two CVSS 9.2 bugs in the PHP runtime allow unauthenticated code execution; the patch is a package upgrade and a restart, and this guide shows how to find every PHP runtime you need to patch.
Back