OWASP / Nettacker

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
https://owasp.org/www-project-nettacker/
Apache License 2.0
3.53k stars 764 forks source link

We need a module for MS Exchange CVE-2021-26855 #405

Closed securestep9 closed 3 years ago

securestep9 commented 3 years ago

With MSExchange hacking still making headlines every day since 4th March 2021 the attacks are going on all over the world with tens of thousands servers hacked he need a CVE-2021-26855 vuln detection module to help organisations using OWASP Nettacker to detect if they have any vulnerable Exchange servers in their networks.

Nmap script can be found here:

https://github.com/microsoft/CSS-Exchange/blob/main/Security/src/http-vuln-cve2021-26855.nse

we need to create a nettacker module for this task: msexchange_cve_2021_26855_vuln

ktg-123 commented 3 years ago

I would like to take up the issue

ktg-123 commented 3 years ago

The implementation of the module is the same as the nmap script. Please review