Technical Advisory: Proxy*Hell Exploit Chains in the Wild

At the end of November 2022, experts from Bitdefender Labs started to notice an increase in attacks using ProxyNotShell/OWASSRF exploits chains to target on-premises Microsoft Exchange deployments. SSRF attacks on Microsoft Exchange servers are some of the most popular and routinely exploited vulnerabilities. We decided to release a technical advisory describing these attacks, but also documenting some of the recent attacks that we’ve detected in the wild. 

Article Link: Technical Advisory: Proxy*Hell Exploit Chains in the Wild 

1 post - …

advisory article attacks bitdefender end exchange experts exploit exploited exploits labs link microsoft microsoft exchange notice november owassrf popular proxy release servers ssrf target technical vulnerabilities