Praetorian has reverse engineered the Exchange ProxyLogon CVE-2021-26855 leading to a fully functioning end-to-end exploit.

https://www.praetorian.com/blog/reproducing-proxylogon-exploit/