---
id: 7353
title: "Pwn2Own 2021 Microsoft Exchange Exploit Chain"
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/pwn2own-2021-microsoft-exchange-exploit-chain/"
published_at: "2022-06-23T13:06:06Z"
tags: ["rce", "microsoft", "ssrf", "pwn2own", "exploit-chain", "exchange", "proxyshell"]
phying_url: "https://phying.com/item/7353"
lang: en
---

# Pwn2Own 2021 Microsoft Exchange Exploit Chain

## Summary

A Viettel researcher recounts his Pwn2Own 2021 Exchange chain: unauthenticated Autodiscover SSRF, PowerShell backend auth bypass, and OAB file write for RCE - the first two duplicated ProxyShell.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **Published:** 2022-06-23T13:06:06Z
- **Original:** https://blog.viettelcybersecurity.com/pwn2own-2021-microsoft-exchange-exploit-chain/
- **Phying News:** https://phying.com/item/7353