---
id: 7335
title: "The OWASSRF + TabShell exploit chain"
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/tabshell-owassrf/"
published_at: "2022-12-26T02:54:04Z"
tags: ["rce", "microsoft", "ssrf", "exploit-chain", "exchange", "owassrf", "tabshell"]
phying_url: "https://phying.com/item/7335"
lang: en
---

# The OWASSRF + TabShell exploit chain

## Summary

Viettel details two MSRC-reported Exchange bugs: OWASSRF, an authenticated SSRF via the X-OWA-ExplicitLogonUser header reaching backend /powershell, chained with TabShell for RCE in the wild.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **Published:** 2022-12-26T02:54:04Z
- **Original:** https://blog.viettelcybersecurity.com/tabshell-owassrf/
- **Phying News:** https://phying.com/item/7335