# ProxyLogon | PoC Exploit for Microsoft Exchange

**URL:** <https://onehack.st/t/proxylogon-poc-exploit-for-microsoft-exchange/176609>\
**Category:** Tools & Scripts\
**Tags:** privacy\
**Created:** [November 5, 2023, 10:02pm UTC](https://onehack.st/t/proxylogon-poc-exploit-for-microsoft-exchange/176609 "2023-11-05T22:02:00Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![TheStrength](https://onehack.st/user_avatar/onehack.st/thestrength/32/46753_2.png) [@TheStrength](https://onehack.st/u/TheStrength)\
**Post date:** [November 5, 2023, 10:02pm UTC](https://onehack.st/t/proxylogon-poc-exploit-for-microsoft-exchange/176609/1 "2023-11-05T22:02:00Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/c/c/cc32478c1e511a28313d27e8c932dd82fc02d4f1.png)

PoC Exploit for Microsoft Exchange Launche

Original PoC: [https://github.com/testanull](https://github.com/testanull)

**How to use:**

`python proxylogon.py <name or IP of server> <user@fqdn>`

**Example:**

`python proxylogon.py primary administrator@lab.local`

If successful you will be dropped into a webshell. `exit` or `quit` to escape from the webshell (or ctrl+c)

By default, it will create a file `test.aspx`. This can be changed.

**Special Thanks and resources:**

@Flangvik @Testanull [https://www.praetorian.com/blog/reproducing-proxylogon-exploit/](https://www.praetorian.com/blog/reproducing-proxylogon-exploit/)

## GitHub:

> **[GitHub - hausec/ProxyLogon](https://github.com/hausec/ProxyLogon)**
>
> Contribute to hausec/ProxyLogon development by creating an account on GitHub.