PowerShell script for hunting webshells on Microsoft Exchange Servers.
Switch branches/tags
Nothing to show
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Failed to load latest commit information.
Invoke-ExchangeWebShellHunter.ps1
README.md

README.md

Invoke-ExchangeWebShellHunter

PowerShell script for hunting webshells on Microsoft Exchange Servers.

Relies on Invoke-IR/PowerForensics: https://github.com/Invoke-IR/PowerForensics

Still in development, will eventually create a pull request for PowerForensics.