nord-stream

Nord Stream Nord Stream 是一款工具，允许你通过部署恶意流水线来提取存储在 CI/CD 环境中的机密。 它目前支持 Azure DevOps、GitHub 和 GitLab。 在以下博文中了解更多信息：https://www.synacktiv.com/publications/cicd-secrets-extraction-tips-and-tricks 目录 Nord Stream 目录 安装 用法 共享参数 描述令牌 构建 YAML YAML 清理日志 签名提交 Azure DevOps 服务连接 SSH 列出组织 帮助 GitHub 列出保护 禁用保护 强制...

ObfuscatedSharpCollection

Obfuscated SharpCollection 使用 @0xcc00 开发的 yetAnotherObfuscator，结合常见 C 攻击性工具的全新构建，以 CDI（持续部署与集成）方式通过 Azure DevOps 发布管道，对自动化混淆进行的一次快速而粗糙的尝试。 Obfuscated SharpCollection 并不打算像原始SharpCollection 仓库那样完整。Obfuscated SharpCollection 仅包含经过混淆的 NetFramework 4.7 ANYCPU 编译二进制文件 Azure DevOps？ 每天晚上 03:00，Azure...

ADOKit

ADOKit 説明 Azure DevOps Services 攻撃ツールキット - ADOKit は、利用可能な REST API を活用して Azure DevOps Services を攻撃するために使用できるツールキットです。このツールは、攻撃モジュールを指定し、それぞれの Azure DevOps Services インスタンスの有効な資格情報（API キーまたは盗難された認証クッキー）を指定することができます。サポートされている攻撃モジュールには、偵察、権限昇格、永続化が含まれます。ADOKit...

POC-CVE-2026-42826-2026-42826-Microsoft-Azure-DevOps-Information-Disclosure-Vulnerability

CVE-2026-42826 — Azure DevOps 信息泄露 PoC 概述 字段| 值 ---|--- CVE| CVE-2026-42826 CVSS| 10.0 严重（Microsoft）/ 7.5 高危（NVD） CWE| CWE-200（向未授权行为者暴露敏感信息） GHSA| GHSA-gmwx-3xm2-9fx8 受影响| Azure DevOps Services、Azure DevOps Server 2022/2025 已修补| Azure DevOps Server 2026.0.1+（Services 已在服务端修补） 发现者| Noa...

SharpCollection

SharpCollection 常见 C 攻击性工具的每日构建，直接从各自 master 分支获取最新代码，使用 Azure DevOps 发布管道以 CDI 方式构建并发布。 找不到你喜欢的工具？欢迎提交 issue 或在 X 上私信我 @Flangvik 请注意，Cobalt Strike 的 execute-assembly 仅接受以 "Any CPU" 配置编译的二进制文件。 OpSec 在实际交战中，我应该盲目部署这些二进制文件吗？ 当然不行 ，始终仔细检查你在客户端或网络上部署的任何内容。例如 https://github.com/dnSpyEx/dnSpy...

sysmon-parser

sysmon-parser 为 Azure Sentinel 自动生成的 Sysmon 解析器 Sysmon-AllVersionsParser.txt 可作为函数加载到 Azure Sentinel 中，以解析您的所有事件。 有一个 Azure Devops 流水线会每日触发，安装最新版本的 Sysmon，提取其架构，并用所有唯一字段填充解析器。 该 PowerShell 脚本也可以在安装了 Sysmon 的本地计算机上运行。...

azuredevops-enum

ado-enum 一个使用个人访问令牌（PAT）枚举 Azure DevOps 组织的命令行工具。它通过查询 Azure DevOps REST API 来呈现项目、仓库、服务连接、构建、构建产物和安全设置 — 在对 ADO 环境进行授权安全评估时非常有用。 功能范围与 ADOKit 类似。主要区别：采用 Python 实现，因此更具可移植性；该工具专注于只读枚举，并且能够枚举权限。 Azure DevOps enumeration tool — projects, repositories, service connections, and more. positional...

CVE-2020-37267

A flaw was found in Renovate. When used with Azure DevOps, the bot's authorization token may be exposed in server or pipeline logs. This occurs because the git http.extraheader=AUTHORIZATION parameter is logged without redaction. An attacker with access to these logs could obtain the bot's...

CVE-2020-37267

Renovate versions =19.180.0 and 23.25.1, when used with Azure DevOps, may expose the bot's authorization token in server or pipeline logs because the git http.extraheader=AUTHORIZATION parameter is logged without redaction. Anyone with access to saved logs could obtain the bot credentials. Fixed ...

EUVD-2020-31261

Renovate versions =19.180.0 and 23.25.1, when used with Azure DevOps, may expose the bot's authorization token in server or pipeline logs because the git http.extraheader=AUTHORIZATION parameter is logged without redaction. Anyone with access to saved logs could obtain the bot credentials. Fixed ...

CVE-2020-37267

Renovate versions >=19.180.0 and

CVE-2020-37267 Renovate 19.180.0 before 23.25.1 Token Leakage via Logs

Renovate versions =19.180.0 and 23.25.1, when used with Azure DevOps, may expose the bot's authorization token in server or pipeline logs because the git http.extraheader=AUTHORIZATION parameter is logged without redaction. Anyone with access to saved logs could obtain the bot credentials. Fixed ...

CVE-2020-37267: Insertion of Sensitive Information into Log File

Renovate versions =19.180.0 and 23.25.1, when used with Azure DevOps, may expose the bot's authorization token in server or pipeline logs because the git http.extraheader=AUTHORIZATION parameter is logged without redaction. Anyone with access to saved logs could obtain the bot credentials. Fixed ...

PT-2026-78371

Renovate versions =19.180.0 and 23.25.1, when used with Azure DevOps, may expose the bot's authorization token in server or pipeline logs because the git http.extraheader=AUTHORIZATION parameter is logged without redaction. Anyone with access to saved logs could obtain the bot credentials. Fixed ...

CVE-2026-66378

An authenticated user without repository read permission may access private NuGet metadata under specific conditions...

Malicious code in matlab-azure-devops-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecc42778bb54bfdea5784d5dcb68cf43c89def3dbaeddba1d1a6bd2850cb174b The package's preinstall script node index.js auto-executes on npm install and collects host identifiers os.hostname, os.userInfo.username, home...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2026-42826 — Azure DevOps Information Disclosure PoC O...

Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents

A single invisible comment in an Azure DevOps pull request can turn a reviewer's own AI coding agent against them, driving it into projects the attacker has no rights to reach and quietly leaking what it finds. The flaw is in Microsoft's official Azure DevOps MCP server, and it works because one ...

Beyond the benchmark: Advancing security at AI speed

In this article 1. From the lab into the pipeline 2. This month’s set of discoveries 3. Beyond the headline: What the engineering work taught us 4. Where we go next 5. Defense at AI speed 6. Learn more Every vulnerability has two clocks running. One belongs to the defender racing to find it; the...

vulnerabilities handled in Microsoft Developer Tools

Microsoft has addressed vulnerabilities in various Developer Tools. A malicious individual could exploit these vulnerabilities to carry out attacks that can cause the following types of damage: - Denial-of-Service DoS attacks - Bypass of security measures - Execution of arbitrary code user rights...