nord-stream

Nord Stream Nord Stream は、 悪意のある パイプラインをデプロイすることで CI/CD 環境内に保存されたシークレットを抽出できるツールです。 現在、Azure DevOps、GitHub、GitLab をサポートしています。 詳細は以下のブログ記事をご覧ください: https://www.synacktiv.com/publications/cicd-secrets-extraction-tips-and-tricks 目次 Nord Stream 目次 インストール 使用方法 共通引数 トークンの説明 YAML のビルド YAML ログの削除 コミットへの署名...

ObfuscatedSharpCollection

Obfuscated SharpCollection 使用 @0xcc00 开发的 yetAnotherObfuscator，结合常见 C 攻击性工具的全新构建，以 CDI（持续部署与集成）方式通过 Azure DevOps 发布管道，对自动化混淆进行的一次快速而粗糙的尝试。 Obfuscated SharpCollection 并不打算像原始SharpCollection 仓库那样完整。Obfuscated SharpCollection 仅包含经过混淆的 NetFramework 4.7 ANYCPU 编译二进制文件 Azure DevOps？ 每天晚上 03:00，Azure...

ADOKit

ADOKit 説明 Azure DevOps Services 攻撃ツールキット - ADOKit は、利用可能な REST API を活用して Azure DevOps Services を攻撃するために使用できるツールキットです。このツールは、攻撃モジュールを指定し、それぞれの Azure DevOps Services インスタンスの有効な資格情報（API キーまたは盗難された認証クッキー）を指定することができます。サポートされている攻撃モジュールには、偵察、権限昇格、永続化が含まれます。ADOKit...

POC-CVE-2026-42826-2026-42826-Microsoft-Azure-DevOps-Information-Disclosure-Vulnerability

CVE-2026-42826 — Azure DevOps 信息泄露 PoC 概述 字段| 值 ---|--- CVE| CVE-2026-42826 CVSS| 10.0 严重（Microsoft）/ 7.5 高危（NVD） CWE| CWE-200（向未授权行为者暴露敏感信息） GHSA| GHSA-gmwx-3xm2-9fx8 受影响| Azure DevOps Services、Azure DevOps Server 2022/2025 已修补| Azure DevOps Server 2026.0.1+（Services 已在服务端修补） 发现者| Noa...

SharpCollection

SharpCollection 常见 C 攻击性工具的每日构建，直接从各自 master 分支获取最新代码，使用 Azure DevOps 发布管道以 CDI 方式构建并发布。 找不到你喜欢的工具？欢迎提交 issue 或在 X 上私信我 @Flangvik 请注意，Cobalt Strike 的 execute-assembly 仅接受以 "Any CPU" 配置编译的二进制文件。 OpSec 在实际交战中，我应该盲目部署这些二进制文件吗？ 当然不行 ，始终仔细检查你在客户端或网络上部署的任何内容。例如 https://github.com/dnSpyEx/dnSpy...

sysmon-parser

sysmon-parser 为 Azure Sentinel 自动生成的 Sysmon 解析器 Sysmon-AllVersionsParser.txt 可作为函数加载到 Azure Sentinel 中，以解析您的所有事件。 有一个 Azure Devops 流水线会每日触发，安装最新版本的 Sysmon，提取其架构，并用所有唯一字段填充解析器。 该 PowerShell 脚本也可以在安装了 Sysmon 的本地计算机上运行。...

azuredevops-enum

ado-enum Azure DevOps 組織を Personal Access Token（PAT）を使って列挙するためのコマンドラインツールです。Azure DevOps REST API に問い合わせて、プロジェクト、リポジトリ、サービス接続、ビルド、ビルド成果物、セキュリティ設定などを明らかにします。ADO 環境の許可を得たセキュリティ評価において有用です。 ADOKit と同様の範囲をカバーします。主な違い: Python 実装のため移植性が高く、読み取り専用の列挙に焦点を当てており、権限の列挙が可能です。 Azure DevOps enumeration tool —...

CVE-2020-37267

A flaw was found in Renovate. When used with Azure DevOps, the bot's authorization token may be exposed in server or pipeline logs. This occurs because the git http.extraheader=AUTHORIZATION parameter is logged without redaction. An attacker with access to these logs could obtain the bot's...

CVE-2020-37267

Renovate versions =19.180.0 and 23.25.1, when used with Azure DevOps, may expose the bot's authorization token in server or pipeline logs because the git http.extraheader=AUTHORIZATION parameter is logged without redaction. Anyone with access to saved logs could obtain the bot credentials. Fixed ...

EUVD-2020-31261

Renovate versions =19.180.0 and 23.25.1, when used with Azure DevOps, may expose the bot's authorization token in server or pipeline logs because the git http.extraheader=AUTHORIZATION parameter is logged without redaction. Anyone with access to saved logs could obtain the bot credentials. Fixed ...

CVE-2020-37267

Renovate versions >=19.180.0 and

CVE-2020-37267 Renovate 19.180.0 before 23.25.1 Token Leakage via Logs

Renovate versions =19.180.0 and 23.25.1, when used with Azure DevOps, may expose the bot's authorization token in server or pipeline logs because the git http.extraheader=AUTHORIZATION parameter is logged without redaction. Anyone with access to saved logs could obtain the bot credentials. Fixed ...

CVE-2020-37267: Insertion of Sensitive Information into Log File

Renovate versions =19.180.0 and 23.25.1, when used with Azure DevOps, may expose the bot's authorization token in server or pipeline logs because the git http.extraheader=AUTHORIZATION parameter is logged without redaction. Anyone with access to saved logs could obtain the bot credentials. Fixed ...

PT-2026-78371

Renovate versions =19.180.0 and 23.25.1, when used with Azure DevOps, may expose the bot's authorization token in server or pipeline logs because the git http.extraheader=AUTHORIZATION parameter is logged without redaction. Anyone with access to saved logs could obtain the bot credentials. Fixed ...

CVE-2026-66378

An authenticated user without repository read permission may access private NuGet metadata under specific conditions...

Malicious code in matlab-azure-devops-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecc42778bb54bfdea5784d5dcb68cf43c89def3dbaeddba1d1a6bd2850cb174b The package's preinstall script node index.js auto-executes on npm install and collects host identifiers os.hostname, os.userInfo.username, home...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2026-42826 — Azure DevOps Information Disclosure PoC O...

Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents

A single invisible comment in an Azure DevOps pull request can turn a reviewer's own AI coding agent against them, driving it into projects the attacker has no rights to reach and quietly leaking what it finds. The flaw is in Microsoft's official Azure DevOps MCP server, and it works because one ...

Beyond the benchmark: Advancing security at AI speed

In this article 1. From the lab into the pipeline 2. This month’s set of discoveries 3. Beyond the headline: What the engineering work taught us 4. Where we go next 5. Defense at AI speed 6. Learn more Every vulnerability has two clocks running. One belongs to the defender racing to find it; the...

vulnerabilities handled in Microsoft Developer Tools

Microsoft has addressed vulnerabilities in various Developer Tools. A malicious individual could exploit these vulnerabilities to carry out attacks that can cause the following types of damage: - Denial-of-Service DoS attacks - Bypass of security measures - Execution of arbitrary code user rights...