CVE-2022-41080

This repository contains a writeup and reference to CVE-2022-41080, which is part of the OWASSRF exploit chain affecting Microsoft Exchange. It describes the vulnerability and its use in ransomware attacks but does not include functional exploit code.

This repository contains a functional exploit for CVE-2022-41082, a post-authentication RCE vulnerability in Microsoft Exchange Server (ProxyNotShell). It includes a Python-based PoC that leverages OWASSRF to execute arbitrary commands via PowerShell remoting, along with a PowerShell script for privilege escalation (TabShell, CVE-2022-41076).