Follow us on Twitter!
Don't judge the unknown - Grindordie
Thursday, April 17, 2014
Navigation
Home
HellBoundHackers Main:
HellBoundHackers Find:
HellBoundHackers Information:
Learn
Communicate
Submit
Shop
Challenges
HellBoundHackers Exploit:
HellBoundHackers Programming:
HellBoundHackers Think:
HellBoundHackers Track:
HellBoundHackers Patch:
HellBoundHackers Other:
HellBoundHackers Need Help?
Other
Members Online
Total Online: 17
Guests Online: 14
Members Online: 3

Registered Members: 82822
Newest Member: TheBunter
Latest Articles
View Thread

HellBound Hackers | Computer General | Web hacking

Author

MS Exchange server


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 15-11-07 20:06
i need help. we are using in school ms exchange server (running on windows server edition) and we have abbility to use web access to read our mail on-line. i need to know if exchange using some default way to access the web access. e.g. http://**********.com/exchange etc. etc. i know that the "exchange" was included in the url, but its not that right way. so if it uses some default address, please tell it to me. admin probably dont changed it, but i cant ask him for the right url.
thanks in advance


Author

RE: MS Exchange server


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 15-11-07 21:23
Well, three possible ways, I suppose:

1. Find out the POP mail server setting in Outlook / other mail clients, and try that.
2. Find out the fully qualified DNS name of the server, and try that.
3. Try variations of the DNS name, starting with "pop", "smtp", or "mail".



Author

RE: MS Exchange server


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 15-11-07 21:42
Do you know the name of the exchange server? The outlook web access(OWA) runs under IIS, so if no other site is being hosted on the machine it should just be: https://exchangeserver.yourdomain.com.
Let me know if it works.


Author

RE: MS Exchange server

SET
Member

Your avatar

Posts: 380
Location: 0
Joined: 22.02.07
Rank:
Moderate
Posted on 15-11-07 21:55
well the one i have at work is https://mail.*****.org/exchange

try it out


arcset.com/imgs/Comp 1_4.gif
ARCSET.com
Author

RE: MS Exchange server

I-O-W-A
Member



Posts: 206
Location: Somewhere Only I Know
Joined: 01.08.06
Rank:
Apprentice
Posted on 15-11-07 23:28
like the previouse posts most exchange servers are configured under a SUB domain rather than www.domain.com/exchange but if your school / work are akward like me then it will be www.domain.com/exchange


the thing with the exchange server is tht it is designed to be secure, unless you know about it or you know where the "server" is held your gonna have a hard time hacking it (well i think so but im not tht experianced) maybe learn about IIS like the previouse post sed there is vunrabilitys in IIS that may help you?


Peace
I-O-W-A


img517.imageshack.us/img517/8460/iowasssec7kh5.jpg

^thanx x-x for the sig^



img411.imageshack.us/img411/7846/sigforiowa2px1.gif
thanks CyberSpider For The Sig ^^


You See My Soul Its Kinda Grey, You See My Heart You look Away
the_new_abortion_is_here@hotmail.com
Author

RE: MS Exchange server


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 16-11-07 00:09
I-O-W-A wrote:
like the previouse posts most exchange servers are configured under a SUB domain rather than www.domain.com/exchange but if your school / work are akward like me then it will be www.domain.com/exchange


Err... what? Most environments shorten it to a single domain reference for ease of use. And most of them don't start with "www".


the thing with the exchange server is tht it is designed to be secure, unless you know about it or you know where the "server" is held your gonna have a hard time hacking it (well i think so but im not tht experianced) maybe learn about IIS like the previouse post sed there is vunrabilitys in IIS that may help you?


I think you need to reference a bit more on Exchange Server before making those statements. The primary usage of Exchange is to integrate it with an Active Directory structure. Thus, an Exchange Server email list can enumerate users for you. Let's not get started on the actual weaknesses of the web interface or the potential weaknesses inherent in mail servers...

For the moment, let the OP determine how to access it. Then, he can be concerned with recon.



Author

RE: MS Exchange server


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 22-11-07 05:57
mail.********/exc. . .
thanks it worked