近两年域渗透历史漏洞汇总

1、域渗透历史漏洞汇总 - Leticia's Blog

MS14-068(CVE-2014-6324)

POC:https://github.com/abatchy17/WindowsExploits/tree/master/MS14-068

2、CVE-2020-1472

POC:https://github.com/blackarrowsec/redteam-research/tree/master/CVE-2020-1472

3、CVE-2021-42287&42278

Windows域服务权限提升漏洞

poc:https://github.com/WazeHell/sam-the-admin

https://github.com/WazeHell/sam-the-admin

4、CVE-2019-1040(Microsoft Windows NTLM认证漏洞)

https://github.com/Ridter/CVE-2019-1040

5、CVE-2020-0688

Microsoft Exchange 反序列化RCE

POC:https://github.com/zcgonvh/CVE-2020-0688

6、CVE-2021-1675(Windows Print Spooler权限提升漏洞)

POC:https://github.com/cube0x0/CVE-2021-1675

7、CVE-2021-26855/CVE-2021-27065

Exchange ProxyLogon远程代码执行漏洞

POC:https://github.com/hausec/ProxyLogon

8、CVE-2020-17144(Microsoft Exchange 远程代码执行漏洞)

POC:https://github.com/Airboi/CVE-2020-17144-EXP

9、CVE-2020-16875(Microsoft Exchange 远程代码执行漏洞)

POC:https://srcincite.io/pocs/cve-2020-16875.py.txt

10、CVE-2021-34473

https://github.com/dmaasland/proxyshell-poc

11、CVE-2021-33766

POC:https://github.com/bhdresh/CVE-2021-33766