https://blog.msnieman.com/tags/cve-2021-34473/Recent content in CVE-2021-34473 on Myles Nieman — BlogHugoen-usThu, 28 Aug 2025 00:00:00 +0000https://blog.msnieman.com/writeups/logonshell/Thu, 28 Aug 2025 00:00:00 +0000https://blog.msnieman.com/writeups/logonshell/A Microsoft Exchange Server 2019 RTM (15.2.221.12) on the edelweiss.htb domain is exploited via ProxyShell (CVE-2021-34473) — the auth bypass generates an impersonation token for Administrator, and a Metasploit payload drops a Meterpreter session, then evil-winrm provides a stable shell using the recovered NTLM hash.