-
Notifications
You must be signed in to change notification settings - Fork 13.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add the DOMAIN option to the CVE-2020-0688 Exploit #14190
Add the DOMAIN option to the CVE-2020-0688 Exploit #14190
Conversation
I installed Exchange and created a user. I can log in and check my mail as that user, but when I run chack, I get this:
Exchange forced me to install an update, but I picked the offline installer. I'm hoping that the OS did not decide I really meant to install all the patches. Is this what it looks like when something is not vulnerable? |
Yup; looks like Windows snuck in extra updates when I downloaded the specific patch required. Redid it with total air-gap, and it works, now.
|
FWIW, complete:
|
Release Notes:This updates the exploit/windows/http/exchange_ecp_viewstate exploit module for CVE-2020-0688 to add the DOMAIN datastore option for consistency with other Metasploit modules. |
This updates the
exploit/windows/http/exchange_ecp_viewstate
exploit module for CVE-2020-0688 to add theDOMAIN
datastore option for consistency with other Metasploit modules. Originally, it was expected that the username would just be in the format ofdomain\username
and it can still be done that way, however this adds an explicit option for specifying the domain. This hopefully makes it a bit more clear to the users.Verification
msfconsole
use exploit/windows/http/exchange_ecp_viewstate
RHOSTS
,RPORT
andSSL
options as appropriateDOMAIN
,USERNAME
andPASSWORD
options to a valid account with OWA acccessExample
The following example demonstrates this functionality by first using an incorrect domain (
EXCHG111
) which causes the module'scheck
method to fail, and then using the correct domain (EXCHG
) it completes successfully.