monkey365

...

aad-sso-enum-brute-spray

aad-sso-enum-brute-spray SecureWorks 近期披露的 Azure Active Directory 密码暴力破解漏洞的概念验证（POC） 描述 此代码是最近披露的 Azure Active Directory 密码暴力破解漏洞的概念验证，该漏洞由 Secureworks 公布（Ars Technica 的这篇文章 比官方发布大约早一天，但内容几乎完全相同）。 理论上，这种方法允许攻击者对一个或多个 AAD 账户执行暴力破解或密码喷洒攻击，而不会引发账户锁定或产生日志数据，从而使攻击难以被察觉。 用法 基本用法很简单： 密码喷洒 root@kitploit:...

CVE-2025-53786

CVE-2025-53786 漏洞利用 本项目提供了一个针对 Microsoft Exchange Server 混合部署中严重漏洞的概念验证（PoC）漏洞利用代码，该漏洞编号为 CVE-2025-53786。该漏洞允许具有本地 Exchange 服务器管理权限的攻击者提升权限，并可能同时危害本地和云环境（包括 Azure Active Directory 集成）。 免责声明： 本工具仅供教育和研究用途。严禁在生产环境中未经授权使用或用于恶意目的。作者对因使用本工具而造成的任何误用或损害概不负责。 漏洞利用： href 功能 该漏洞利用提供了多项强大功能，以演示 CVE-2025-537...

caOptics

Nota Proyecto archivado debido a cambios en las prioridades de desarrollo y a la reorientación de mis esfuerzos comunitarios hacia otras áreas PoCs, otras herramientas y demos/presentaciones; el proyecto se establece como solo lectura. CA Optics - Analizador de brechas de acceso condicional de...

Azure-AccessPermissions

Azure-AccessPermissions Easy to use PowerShell script to enumerate access permissions in an Azure Active Directory environment. Background details can be found in the accompanied blog posts: Untangling Azure Active Directory Principals & Access Permissions Untangling Azure Active Directory...

CVE-2026-83711 Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability

...

The vulnerability of the cloud platform for managing and protecting Microsoft Entra ID (formerly Azure Active Directory) is related to deserialization flaws, allowing attackers to execute arbitrary code.

The vulnerability of the cloud-based platform for managing and protecting Microsoft Entra ID formerly Azure Active Directory is related to deficiencies in deserialization mechanisms. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

EUVD-2026-63692

Server-side request forgery ssrf in Azure Active Directory allows an authorized attacker to elevate privileges over a network...

CVE-2026-69851

Server-side request forgery ssrf in Azure Active Directory allows an authorized attacker to elevate privileges over a network...

CVE-2026-69851

An SSRF vulnerability in Microsoft Entra ID (Azure Active Directory) allows an authorized attacker to elevate privileges over a network. CVSS 9.9 (critical) reflects network access, low complexity, and full confidentiality/integrity/availability impact. Exploitation status and patch details are n...

Microsoft Entra ID Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Azure Active Directory allows an authorized attacker to elevate privileges over a network...

PT-2026-79215

Name of the Vulnerable Software and Affected Versions Azure Active Directory affected versions not specified Description Server-side request forgery SSRF, a flaw where an attacker induces a server-side application to make requests to an unintended location, exists in Azure Active Directory. This...

EUVD-2026-54315

Modification of assumed-immutable data maid in Azure Active Directory allows an authorized attacker to elevate privileges over a network...

CVE-2026-50481

Modification of assumed-immutable data maid in Azure Active Directory allows an authorized attacker to elevate privileges over a network...

CVE-2026-50481

Modification of assumed-immutable data maid in Azure Active Directory allows an authorized attacker to elevate privileges over a network...

CVE-2026-50481

CVE-2026-50481 affects Azure Active Directory, where modification of assumed-immutable data (maid) enables an authorized attacker to elevate privileges over a network. The CVSS data indicates NETWORK attack vector, LOW access complexity, LOW privileges required, and HIGH confidentiality/integrity...

CVE-2026-50481 Azure Active Directory Elevation of Privilege Vulnerability

...

CVE-2026-50481 Azure Active Directory Elevation of Privilege Vulnerability

...

Azure Active Directory Elevation of Privilege Vulnerability

Modification of assumed-immutable data maid in Azure Active Directory allows an authorized attacker to elevate privileges over a network...

PT-2026-68825

Name of the Vulnerable Software and Affected Versions Azure Active Directory affected versions not specified Description An authorized attacker can elevate privileges over a network by modifying assumed-immutable data maid within Azure Active Directory. Assumed-immutable data refers to attributes...