⬇ Download holy card: ·
Saint ProxyLogon, Who Walked In as If He Had the Mail
Patron of exposed mail servers, gift-wrapped web shells, and sysadmins the world over.
Life
On 2 March 2021 Microsoft shipped emergency patches for Exchange Server. Orange Tsai of DEVCORE had chained CVE-2021-26855, which let you pose as the server, with CVE-2021-27065, which let you write files: together they gave unauthenticated code execution. Before everyone updated, tens of thousands of servers were compromised and filled with web shells. The chain was named ProxyLogon.
Prayer
O Saint ProxyLogon, who introduces himself to the server as its equal, keep our Exchange from believing whoever merely claims to hold the mail. Amen.
How to celebrate
Celebrated by applying the Exchange updates at once and hunting for hidden web shells before someone else does.
Pose as the master, and every room opens.