80 matches found
Modlishka
..Modlishka.. Modlishka is an open-source penetration testing tool that acts as a man-in-the-middle proxy. It introduced a new technical approach to handling browser-based HTTP traffic flow, which allows it to transparently proxy multi-domain destination traffic, both TLS and non-TLS, over a sing...
TokenFlare
TokenFlare Serverless AITM Phishing Simulation Framework for Entra ID / M365 Features Lean: Core logic in src/worker.js only 530 lines of JavaScript. Modular: Supports a number of OAuth flows, with Intune Conditional Access bypass support out of the box Easily tweaked: Set up client branding, URL...
AzureAD-Attack-Defense
Attack and Defense Playbook for Microsoft Entra This publication is a collection of various common attack scenarios on Microsoft Entra and how they can be mitigated or detected. All of the included scenarios, insights and comments are based on experiences from the contributors during their attack...
decode-spam-headers
decode-spam-headers.py Whether you are trying to understand why a specific e-mail ended up in SPAM/Junk for your daily Administrative duties or for your Red-Team Phishing simulation purposes, this script is there for you to help! Idea arose while delivering a commercial Phishing Simulation...
CVE-2023-51073
CVE-2023-51073 - Firmware Update Server Verification Vulnerability on Buffalo LS210D Version 1.78-0.03 Christopher J. Pace and Ryan Miller The Buffalo LS210D is a Network Attached Storage NAS server designed and marketed towards small-businesses and individuals. Within the LS210D is the ability t...
CVE-2026-87944
Improper Certificate Validation vulnerability in Drupal SAML SSO - Service Provider allows Adversary in the Middle AiTM. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0...
CVE-2026-87944 SAML SSO - Service Provider - Critical - Improper certificate validation - SA-CONTRIB-2026-142
Improper Certificate Validation vulnerability in Drupal SAML SSO - Service Provider allows Adversary in the Middle AiTM. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0...
EUVD-2026-107857
Improper Certificate Validation vulnerability in Drupal SAML SSO - Service Provider allows Adversary in the Middle AiTM. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0...
CVE-2026-87944
The Drupal SAML SSO - Service Provider module (versions 0.0.0 through 3.2.0 ) contains an Improper Certificate Validation vulnerability. The root cause is that the module fails to properly validate TLS certificates during outbound HTTPS requests. This allows an Adversary in the Middle (AiTM) to i...
CVE-2026-87944 SAML SSO - Service Provider - Critical - Improper certificate validation - SA-CONTRIB-2026-142
Improper Certificate Validation vulnerability in Drupal SAML SSO - Service Provider allows Adversary in the Middle AiTM. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0...
CVE-2026-87944 SAML SSO - Service Provider - Critical - Improper certificate validation - SA-CONTRIB-2026-142
Improper Certificate Validation vulnerability in Drupal SAML SSO - Service Provider allows Adversary in the Middle AiTM. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0...
CVE-2026-96375
The Drupal Cloud module (versions 0.0.0 to 7.0.1 ) is vulnerable to Improper Certificate Validation (CWE-295). The Kubernetes and VMware integrations fail to properly validate TLS certificates when connecting to remote API endpoints. This allows an Adversary in the Middle (AiTM) to intercept conn...
CVE-2026-96375 Cloud - Critical - Remote code execution - SA-CONTRIB-2026-176
Improper Certificate Validation vulnerability in Drupal Cloud allows Adversary in the Middle AiTM. This issue affects Cloud versions: from 0.0.0 to 7.0.1...
CVE-2026-96375 Cloud - Critical - Remote code execution - SA-CONTRIB-2026-176
Improper Certificate Validation vulnerability in Drupal Cloud allows Adversary in the Middle AiTM. This issue affects Cloud versions: from 0.0.0 to 7.0.1...
agentic-store-mcp (1.0.8), ai-parrot (>=0.20.3, <=1.2.4) +279 more potentially affected by CVE-2026-111497 via brotli (>=1.0.7, <=1.2.0)
brotli PYPI version =1.0.7, =0.20.3, =0.1.0, =22.5.13, =2.4.11, =3.1.0, =3.9.11, =1.0.0, =1.0.1 - badger-proxy 0.1.9 and more Source cves: CVE-2026-111497 Source advisory: SNYK:PYTHON-BROTLI-21717207...
UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing
Cybersecurity researchers have disclosed details of an advanced persistent threat APT spear-phishing campaign that has targeted individuals affiliated with Taiwan research organizations to direct victims to an adversary-in-the-middle AitM phishing framework designed to harvest their Google accoun...
UAT-11985: AI-assisted event lures delivering real-time Google AitM phishing
Cisco Talos identified an advanced persistent threat APT spear-phishing campaign against individuals affiliated with Taiwan research organizations. The operation leveraged legitimate public event themes and impersonated reputable academic and policy institutions to establish credibility. The...
China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing
A new China-nexus cyber espionage group known as TA419 has been attributed to multiple credential phishing campaigns targeting artificial intelligence AI experts working for U.S. think tanks, universities, and legal sector organizations. The campaigns have impersonated prominent economists and AI...
EUVD-2026-91326
Improper certificate validation vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Adversary in the Middle AiTM. This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned that the product is not supported...
CVE-2026-80443
HAVELSAN Inc. Sef - AI Chatbot Platform (versions before 2.1 ) is vulnerable to an improper certificate validation flaw within the API Tool Runner component. This vulnerability allows an Adversary in the Middle (AiTM) to intercept communications. While the impact is rated as High with potential f...