hxxps://msrc[.]microsoft[.]com/update-guide/vulnerability/CVE-2021-26855

hxxps://msrc[.]microsoft[.]com/update-guide/vulnerability/CVE-2021-27065

hxxps://dovecot[.]org/security

hxxps://devco[.]re/blog/2018/03/06/exim-off-by-one-RCE-exploiting-CVE-2018-6789-en/

hxxps://blog[.]orange[.]tw/2018/08/how-i-chained-4-bugs-features-into-rce-on-amazon[.]html

hxxps://devco[.]re/blog/2020/09/12/how-I-hacked-Facebook-again-unauthenticated-RCE-on-MobileIron-MDM-en/

hxxps://devco[.]re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/

hxxp://blog[.]orange[.]tw/2017/07/how-i-chained-4-vulnerabilities-on[.]html

hxxps://blog[.]orange[.]tw/2016/04/bug-bounty-uber-ubercom-remote-code_7[.]html

hxxps://devco[.]re/blog/2019/07/17/attacking-ssl-vpn-part-1-PreAuth-RCE-on-Palo-Alto-GlobalProtect-with-Uber-as-case-study/

hxxps://devco[.]re/blog/2019/08/09/attacking-ssl-vpn-part-2-breaking-the-Fortigate-ssl-vpn/

hxxps://msrc-blog[.]microsoft[.]com/2017/07/20/englishmansdentist-exploit-analysis/

hxxps://en[.]wikipedia[.]org/wiki/Equation_Group

hxxps://us-cert[.]cisa[.]gov/ncas/alerts/aa20-107a

hxxps://www[.]ncsc[.]gov[.]uk/news/alert-vpn-vulnerabilities

hxxps://media[.]defense[.]gov/2019/Oct/07/2002191601/-1/-1/0/CSA-MITIGATING-RECENT-VPN-VULNERABILITIES[.]PDF

hxxps://www[.]bleepingcomputer[.]com/news/security/passwords-exposed-for-almost-50-000-vulnerable-fortinet-vpns/

hxxps://badpackets[.]net/over-14500-pulse-secure-vpn-endpoints-vulnerable-to-cve-2019-11510/

hxxps://www[.]zdnet[.]com/article/nsa-publishes-list-of-top-25-vulnerabilities-currently-targeted-by-chinese-hackers/

hxxps://www[.]blackhat[.]com/us-21/briefings/schedule/index[.]html#proxylogon-is-just-the-tip-of-the-iceberg-a-new-attack-surface-on-microsoft-exchange-server-23442

hxxps://defcon[.]org/html/defcon-29/dc-29-speakers[.]html#tsai

hxxps://devco[.]re/blog/2021/08/06/a-new-attack-surface-on-MS-exchange-part-1-ProxyLogon/

hxxps://docs[.]microsoft[.]com/en-us/exchange/architecture/architecture?view=exchserver-2019#client-access-protocol-architecture

hxxps://docs[.]microsoft[.]com/en-us/microsoft-365/enterprise/exchange-2010-end-of-support

hxxps://msrc-blog[.]microsoft[.]com/2021/03/02/multiple-security-updates-released-for-exchange-server/

hxxp://creativecommons[.]org/publicdomain/zero/1[.]0

hxxps://twitter[.]com/orange_8361

hxxps://devco[.]re/

hxxps://www[.]volexity[.]com/blog/2021/03/02/active-exploitation-of-microsoft-exchange-zero-day-vulnerabilities/

hxxps://unit42[.]paloaltonetworks[.]com/china-chopper-webshell/

hxxps://blog[.]rapid7[.]com/2021/03/03/rapid7s-insightidr-enables-detection-and-response-to-microsoft-exchange-0-day/

hxxps://www[.]crowdstrike[.]com/blog/falcon-complete-stops-microsoft-exchange-server-zero-day-exploits/