# Exchange攻击
English: Exchange Attacks
- Entry Count: 5
- Use this file to shortlist relevant payloads, then open the linked source markdown for the full workflow and commands.
## ProxyLogon攻击
- ID: proxylogon
- Difficulty: advanced
- Subcategory: ProxyLogon
- Tags: exchange, proxylogon, cve-2021-26855
- Original Extracted Source: original extracted intranet-security-wiki source/proxylogon.md
Description:
CVE-2021-26855 Exchange SSRF
Prerequisites:
- Exchange可访问
Execution Outline:
1. 探测漏洞
2. 利用脚本
3. 手动利用
## ProxyShell攻击
- ID: proxyshell
- Difficulty: advanced
- Subcategory: ProxyShell
- Tags: exchange, proxyshell, cve-2021-34473
- Original Extracted Source: original extracted intranet-security-wiki source/proxyshell.md
Description:
CVE-2021-34473 Exchange RCE
Prerequisites:
- Exchange可访问
Execution Outline:
1. 探测漏洞
2. 利用脚本
3. 获取邮件
## Exchange枚举
- ID: exchange-enum
- Difficulty: beginner
- Subcategory: 枚举
- Tags: exchange, enum, recon
- Original Extracted Source: original extracted intranet-security-wiki source/exchange-enum.md
Description:
枚举Exchange服务和配置
Prerequisites:
- Exchange可访问
Execution Outline:
1. 版本探测
2. Autodiscover
3. 邮箱枚举
4. NTLM泄露
## ProxyToken攻击
- ID: exchange-proxytoken
- Difficulty: advanced
- Subcategory: ProxyToken
- Tags: exchange, proxytoken, bypass
- Original Extracted Source: original extracted intranet-security-wiki source/exchange-proxytoken.md
Description:
利用Exchange ProxyToken绕过认证
Prerequisites:
- Exchange服务器
- 存在漏洞
Execution Outline:
1. 检测漏洞
2. 利用漏洞
3. 访问邮箱
## Exchange邮箱访问
- ID: exchange-mailbox-access
- Difficulty: beginner
- Subcategory: 邮箱访问
- Tags: exchange, mailbox, access
- Original Extracted Source: original extracted intranet-security-wiki source/exchange-mailbox-access.md
Description:
通过各种方式访问Exchange邮箱
Prerequisites:
- Exchange凭证或漏洞
Execution Outline:
1. OWA访问
2. EWS访问
3. Outlook MAPI
4. 导出邮箱

