dirkjanm/PrivExchange

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1077 stars · 175 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

PrivExchange is a set of Python proof-of-concept tools that abuse Exchange Web Services push notifications to relay authentication and escalate privileges to Domain Admin. It includes a standalone attack tool and an ntlmrelayx attack module for credential-less exploitation.

Use cases

• abuse Exchange push subscriptions to capture SYSTEM authentication
• relay NTLM authentication to escalate to Domain Admin
• demonstrate Exchange privilege escalation vulnerabilities in pentests
• test whether Exchange servers are patched against PrivExchange attacks
• integrate an Exchange attack module into ntlmrelayx workflows

When to choose

• you are performing an authorized penetration test against an Active Directory environment with Exchange
• you need to verify whether Exchange servers are vulnerable to the pushSubscription abuse
• you want a lightweight impacket-based relay attack tool

When to avoid

• you need a maintained tool with recent updates and support for modern Exchange
• you are not authorized to test the target environment
• your target runs patched Exchange with the vulnerability mitigated

Facets

cli-tool · maturity maintenance

security penetration-testing http-client security penetration-testing windows python cli windows active-directory exchange ntlm-relay privilege-escalation red-team impacket proof-of-concept linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="dirkjanm/PrivExchange")