rjsudlow / proxynotshell-IOC-Checker

Script to check for IOC's created by ProxyNotShell (CVE-2022-41040 & CVE-2022-41082)

proxynotshell-IOC-Checker

Powershell script used to check for IOC's for CVE-2022-41040 and CVE-2022-41082 based on community research and Microsoft:

• GTESC
• The Sec Master
• Double Puslar
• Microsoft Security Resource Center
• Microsoft Security Blog

The script may be updated to include more IOC's as more information is made available.

⬇️ Download

git clone https://github.com/rjsudlow/proxynotshell-IOC-Checker

🚀 Usage

Run the following command in an elevated PS shell from the affected server:

.\proxynotshell-IOC-Checker.ps1 'Path\to\Logs\'