KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#dsh #dsh-plugin #typescript #developer-tools #claude-code #ai-agent #codex #deepseek-harness #ai-agents #cli #react #mcp

CVE-2020-0688-Scanner

★ 37 Open GitHub ↗

Quick tool for checking CVE-2020-0688 on multiple hosts with a non-intrusive method.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# CVE-2020-0688-Scanner

Quick C# tool for checking CVE-2020-0688 on multiple hosts with a non-intrusive method.

## Features
  - Scan hosts from an input file.
  - Passive check : grab exchange version by scraping html content.
  - Produces an output file.
  
## Demo
[![](https://github.com/onSec-fr/CVE-2020-0688-Scanner/blob/master/demo.png?raw=true)](https://github.com/onSec-fr/CVE-2020-0688-Scanner/blob/master/demo.png?raw=true)
## How to use

### Prerequisite
  - Windows
  - .NET framework 4.5.2

#### Download
```bash
git clone https://github.com/onSec-fr/CVE-2020-0688-Scanner.git
```
#### Run
```bash
./CVE-2020-0688-Scanner.exe [path_to_input_file]
```
Note : the input file can contain ip addresses, hostnames and FQDN.

#### Disclaimer
This tool has been developed to test your own system or for authorized security testing. Make sure you check with your local laws before running this tool.

#### Limitations
Since Exchange 2013, only the first 3 parts of the version number can be retrieved in this way. This means that sometimes the server may be vulnerable if it has not the very last cumulative update. In this case the server is flagged as "maybe patched".

## References

- Unofficial build chart lists all of the known KB articles, hotfixes, update rollups and other builds of MS Exchange Server 2019, 2016, 2013, 2010, 2007, 2003, 2000, 5.5, 5.0 and 4.0 that have been released. : https://exchangeserverversions.blogspot.com/
- Analysis of CVE-2020-0688 : https://www.thezdi.com/blog/2020/2/24/cve-2020-0688-remote-code-execution-on-microsoft-exchange-server-through-fixed-cryptographic-keys
- https://fr.tenable.com/blog/cve-2020-0688-microsoft-exchange-server-static-key-flaw-could-lead-to-remote-code-execution
- nmap implementation by Kevin Beaumont : https://github.com/PwnPeter/0day-scripts/blob/2845b2d7a62c1baec581afab8fb065dde4f63413/nmap-nse/http-vuln-exchange.nse

CVE-2020-0688-Scanner

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README