Back to the CVE list
CVE-2020-0688 CISA KEV · Actively exploitedLinked to ransomware

Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability

CVSS score

—

EPSS probability

%100.0

Risk score

—

Published

5 y ago

OverviewPublic Exploits (22)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
zcgonvh/CVE-2020-0688
GitHub

Exploit and detect tools for CVE-2020-0688 (★326)

Public PoCSource updated: 18.05.2022 08:43:07
G
Ridter/cve-2020-0688
GitHub

cve-2020-0688 (★304)

Public PoCSource updated: 09.05.2022 00:56:09
G
random-robbie/cve-2020-0688
GitHub

cve-2020-0688 (★159)

Public PoCSource updated: 02.02.2022 04:52:01
G
Yt1g3r/CVE-2020-0688_EXP
GitHub

CVE-2020-0688_EXP Auto trigger payload & encrypt method (★145)

Public PoCSource updated: 16.05.2022 11:24:40
G
Jumbo-WJB/CVE-2020-0688
GitHub

CVE-2020-0688 - Exchange (★64)

Public PoCSource updated: 18.04.2022 12:42:10
G
onSec-fr/CVE-2020-0688-Scanner
GitHub

Quick tool for checking CVE-2020-0688 on multiple hosts with a non-intrusive method. (★38)

Public PoCSource updated: 15.12.2021 23:38:28
G
w4fz5uck5/cve-2020-0688-webshell-upload-technique
GitHub

cve-2020-0688 UNIVERSAL Python implementation utilizing ASPX webshell for command output (★18)

Public PoCSource updated: 21.03.2022 12:35:16
G
ravinacademy/CVE-2020-0688
GitHub

Exploitation Script for CVE-2020-0688 "Microsoft Exchange default MachineKeySection deserialize vulnerability" (★12)

Public PoCSource updated: 07.02.2021 17:36:06
G
youncyb/CVE-2020-0688
GitHub

CVE-2020-0688 (★11)

Public PoCSource updated: 15.12.2021 23:38:28
G
MrTiz/CVE-2020-0688
GitHub

Remote Code Execution on Microsoft Exchange Server through fixed cryptographic keys (★10)

Public PoCSource updated: 13.10.2021 16:24:05
G
zyn3rgy/ecp_slap
GitHub

CVE-2020-0688 PoC (★9)

Public PoCSource updated: 25.03.2022 10:04:55
G
cert-lv/CVE-2020-0688
GitHub

Vulnerability scanner for CVE-2020-0688 (★8)

Public PoCSource updated: 15.12.2021 23:38:38
G
justin-p/PSForgot2kEyXCHANGE
GitHub

PoC for Forgot2kEyXCHANGE (CVE-2020-0688) written in PowerShell (★5)

Public PoCSource updated: 28.04.2022 21:04:52
G
righter83/CVE-2020-0688
GitHub

Exchange Scanner CVE-2020-0688 (★4)

Public PoCSource updated: 15.12.2021 23:38:28
G
mahyarx/Exploit_CVE-2020-0688
GitHub

CVE-2020-0688 "Microsoft Exchange default MachineKeySection deserialize vulnerability" (★4)

Public PoCSource updated: 15.12.2021 23:38:49
E
Exchange Control Panel - Viewstate Deserialization (Metasploit)
Exploit-DB

Exchange Control Panel - Viewstate Deserialization (Metasploit)

Exploit referenceSource updated: 05.03.2020 00:00:00
E
Microsoft Exchange 2019 15.2.221.12 - Authenticated Remote Code Execution
Exploit-DB

Microsoft Exchange 2019 15.2.221.12 - Authenticated Remote Code Execution

Exploit referenceSource updated: 02.03.2020 00:00:00
G
1337-llama/CVE-2020-0688-Python3
GitHub

Exploit updated to use Python 3.

Public PoC
G
chudamax/CVE-2020-0688-Exchange2010
GitHub

CVE-2020-0688 modified exploit for Exchange 2010

Public PoC
G
truongtn/cve-2020-0688
GitHub

I made this script for conducting CVE-2020-0688 more rapidly. It helps to improve checking the vuln, reducing hugely steps for that

Public PoC
G
tvdat20004/CVE-2020-0688
GitHub

CVE-2020-0688: Remote Code Execution on Microsoft Exchange Server Through Fixed Cryptographic Keys

Public PoC
G
W01fh4cker/CVE-2020-0688-GUI
GitHub

GUI Exploit Tool for CVE-2020-0688(Microsoft Exchange default MachineKeySection deserialize vulnerability)

Public PoC

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2020-0688"