#TabShell - Twitter Hashtag

over 3 years ago

Microsoft Exchange: OWASSRF + TabShell (CVE-2022-41076) For a detailed write see research: https://t.co/CcfWPTTsjH PoC: https://t.co/l9ZQwyPpgZ #owa #ssrf #tabshell #poc

0

1

0

184

Gi7w0rm

@Gi7w0rm

over 3 years ago

The #TabShell #vulnerability has dropped. Its a form of #PriviligeEscalation which allows breaking out of the redtricted Powershell Sandbox after you have successfully gained access through #OWASSRF . For a detailed write see this blogpost: https://t.co/yyE9tykVmZ #Exchange

1

127

54

29

28K

Q5Ca @_q5ca

over 3 years ago

#microsoft #exchange #RCE #tabshell #owassrf #PowerShell #tabexpansion #bugbountytips #viral #xuhuớng

Pham Khanh @rskvp93

over 3 years ago

I learned a lot about internal Powershell working when I go through TabShell bug #CVE-2022-41076. Here is the detail https://t.co/lJb7OjPzMj. And a few problems still there and may be need more investigation. with @_q5ca, @hoangnx99

0

305

119

61

40K

0

5

0

1

1K

Mark

@sneakymonk3y

over 3 years ago

Another chained Microsoft Exchange attack, uses the same front end CVE-2022-41080 (#OWASSRF) but then uses CVE-2022-41076 against the backend to get PowerShell RCE... being tracked as #TabShell and this effects Exchange Online. 👀

Nguyen Xuan Hoang @hoangnx99

over 3 years ago

This was really a cool 2-bug chain which lead to RCE on Microsoft Exchange Server: - https://t.co/WuEdu9dWVZ - https://t.co/jsJplHfpaE We also rced Exchange Online. Great work from @rskvp93 <3 Follow him for upcoming blogs #tabshell

hoangnx99's tweet photo. This was really a cool 2-bug chain which lead to RCE on Microsoft Exchange Server:
- https://t.co/WuEdu9dWVZ
- https://t.co/jsJplHfpaE
We also rced Exchange Online.
Great work from @rskvp93 <3 Follow him for upcoming blogs
#tabshell https://t.co/Tf1Kuk03Sv

0

163

57

25

0

1

3

1K

Gi7w0rm

@Gi7w0rm

over 3 years ago

Be on the lookout for #tabshell...

Nguyen Xuan Hoang @hoangnx99

over 3 years ago

This was really a cool 2-bug chain which lead to RCE on Microsoft Exchange Server: - https://t.co/WuEdu9dWVZ - https://t.co/jsJplHfpaE We also rced Exchange Online. Great work from @rskvp93 <3 Follow him for upcoming blogs #tabshell

0

163

57

25

0

10

2

1

2K

Nguyen Xuan Hoang @hoangnx99

over 3 years ago

This was really a cool 2-bug chain which lead to RCE on Microsoft Exchange Server: - https://t.co/WuEdu9dWVZ - https://t.co/jsJplHfpaE We also rced Exchange Online. Great work from @rskvp93 <3 Follow him for upcoming blogs #tabshell

Pham Khanh @rskvp93

over 3 years ago

MSRC released the patch for our "TabShell" vulnerability (https://t.co/5vlDHIlX02). This is a nice bug chain to RCE Exchange on-premises, Exchange Online, Skype for Business Server (may be SFB Online+Teams too but can't find its powershell remote endpoint) with @_q5ca @hoangnx99

3

127

27

12

0

163

57

25

0

Top Tweets for #TabShell

Last Seen Hashtags on Sotwe

Trends for you

Most Popular Users