655 matches found
sysmon-parser
sysmon-parser Automatically generated Sysmon parser for Azure Sentinel Sysmon-AllVersionsParser.txt can be loaded as a function in Azure Sentinel to parse all your events. There is an Azure Devops pipeline that triggers daily to install the latest Sysmon version, extracts the schema and populates...
nord-stream
Nord Stream Nord Stream is a tool that allows you extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently supports Azure DevOps, GitHub and GitLab. Find out more in the following blogpost:...
ADOKit
ADOKit Description Azure DevOps Services Attack Toolkit - ADOKit is a toolkit that can be used to attack Azure DevOps Services by taking advantage of the available REST API. The tool allows the user to specify an attack module, along with specifying valid credentials API key or stolen...
ObfuscatedSharpCollection
Obfuscated SharpCollection Quick and dirty stab at automated Obfuscation using yetAnotherObfuscator by @0xcc00 together with fresh builds of common C offensive tools, in a CDI fashion using Azure DevOps release pipelines. Obfuscated SharpCollection is not intended to be as complete as the...
SharpCollection
SharpCollection Nightly builds of common C offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines. Is your favorite tool missing? Feel free to open an issue or DM me on X @Flangvik Please note that Cobalt Strike's...
POC-CVE-2026-42826-2026-42826-Microsoft-Azure-DevOps-Information-Disclosure-Vulnerability
CVE-2026-42826 — Azure DevOps Information Disclosure PoC Overview Field| Value ---|--- CVE| CVE-2026-42826 CVSS| 10.0 Critical Microsoft / 7.5 High NVD CWE| CWE-200 Exposure of Sensitive Information to an Unauthorized Actor GHSA| GHSA-gmwx-3xm2-9fx8 Affected| Azure DevOps Services, Azure DevOps...
azuredevops-enum
ado-enum A command-line tool for enumerating Azure DevOps organisations using a Personal Access Token PAT. It queries the Azure DevOps REST API to surface projects, repositories, service connections, builds, build artefacts, and security settings — useful during authorised security assessments of...
Vulnerabilities fixed in Microsoft Developer Tools
Microsoft has patched vulnerabilities in various Developer Tools. A malicious actor can exploit these vulnerabilities to carry out attacks that may result in the categories of damage listed in the table below. The conditions required for successful exploitation vary depending on the vulnerability...
CVE-2026-85923
Authorization bypass through user-controlled key in Azure DevOps Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-120783
Weak authentication in Azure DevOps Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-112745
Server-side request forgery ssrf in Azure DevOps Server allows an authorized attacker to disclose information over a network...
CVE-2026-109467
Improper authentication in Azure DevOps allows an authorized attacker to execute code over a network...
EUVD-2026-122282
Weak authentication in Azure DevOps Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-120783
A weak authentication vulnerability exists in Azure DevOps Server , which allows an authorized attacker to elevate privileges over a network. The vulnerability is confirmed with a CVSS 3.1 score of 6.4 (Medium severity) and is categorized under CWE-1390 . While the vulnerability is confirmed, spe...
EUVD-2026-122226
Server-side request forgery ssrf in Azure DevOps Server allows an authorized attacker to disclose information over a network...
CVE-2026-112745
A Server-side request forgery (SSRF) vulnerability exists in Azure DevOps Server , allowing an authorized attacker to disclose information over a network. This vulnerability has a CVSS 3.1 score of 6.5 and is classified as a MEDIUM severity issue. Microsoft has released updates to address this vu...
EUVD-2026-121525
Authorization bypass through user-controlled key in Azure DevOps Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-85923
Azure DevOps Server is affected by an authorization bypass vulnerability (CVE-2026-85923). An authorized attacker can exploit a user-controlled key to elevate privileges over a network. The vulnerability has a CVSS v3.1 score of 8.8 (High) . Microsoft has released updates to address this issue; u...
CVE-2026-109467
A remote code execution vulnerability exists in Azure DevOps due to improper authentication . This flaw allows an authorized attacker to execute arbitrary code over a network. The vulnerability is confirmed to affect Azure DevOps and has been addressed by Microsoft via security updates. Informati...