EIP-2026-119403

This Metasploit auxiliary module scans Microsoft Exchange servers for internal IP address disclosure via HTTP headers in responses from specific paths. It checks for 401 Unauthorized responses with WWW-Authenticate headers or 3xx redirects containing internal IP addresses.