95 matches found
SecretsStalker
secretstalker / / / / / / / / / / / \ / - / - -/ /\ \ / / // / ' / -/ / // // / / / / /, /// /\// root@kitploit: ╔╦╦╬╬╬╬╬╬╦╦╗ ╔╬╬╬╝╝┘ ╚╝╝╬╬╬┐ ╬╬╝╚╩╬╗╔ ╚╬╬╬ ╬╝ ╚╬╬╗╗ ╔ ╚╬╗ ╬╬ ╔╗ ╚╬╬╬╬╬╬╦ ╬╬ we found your secret... ╔╬┤ ╬╬╬ ╬╬╬╬╬╬╬╬╝╝╝╬╬╗ ...now let's see what it ╬╬┤ ╚╩┘ ╚╬╬╬╬╬╩ ╠╬╬ can REALLY do...
APEX
APEX（原 AzurePwn）- Azure 后渗透框架 一旦我们获得了与 Azure 相关账户的某种凭据，该框架便旨在简化后续的后渗透任务。 说实话，这并没有什么新奇或惊艳之处，只是我这个老懒鬼图省事搞出的一些捷径，免得我一遍又一遍地去记所有需要使用的命令。 架构 APEX 基于模块化架构构建，结合了： Microsoft Graph PowerShell 模块：用于访问和查询 Azure AD 资源和动态组。 Azure CLI：用于存储帐户查询和密钥保管库管理。 Az PowerShell 模块：在 Azure 资源中提供额外的探索能力。...
AzureRT
AzureRT 攻撃者の視点からAzureおよびAzure ADとやり取りするためのさまざまなコマンドレットを実装したPowerShellモジュール。 アクセストークンベースの認証の処理、AzからAzureAD、az cliインターフェースへの切り替え、Runbookベースのコマンド実行などの簡単に使用できる事前構築済み攻撃など、便利なユーティリティ。 最も価値のあるコマンドレット このツールキットにはさまざまなコマンドレットが含まれています。このセクションでは、最も重要で有用なものを強調します。 盗まれた資格情報から始まる典型的なRed Team /...
Azure
Azure 攻防安全工具包 一套用于 Azure 安全评估的 Bash 和 PowerShell 脚本合集，涵盖 IAM 权限提升、容器安全、Key Vault 暴露面、Entra ID 配置等。设计用于在 Azure Cloud Shell 或任何已认证的终端中运行。 脚本 IAM / 身份 脚本| Shell| 描述 ---|---|--- IAMPrivz.sh| Bash| 审计整个租户中所有 RBAC 角色定义和分配，查找危险的权限提升权限：roleAssignments/write、roleDefinitions/write 和...
Linux Distros Unpatched Vulnerability : CVE-2026-84962
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google Cloud KMS API calls under the authorized...
CVE-2026-84962
An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google Cloud KMS API calls under the authorized user's identity, escalating database-level access into cloud key control and defeating client-side encryption...
DEBIAN-CVE-2026-84962
An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google Cloud KMS API calls under the authorized user's identity, escalating database-level access into cloud key control and defeating client-side encryption...
CVE-2026-84962
An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google Cloud KMS API calls under the authorized user's identity, escalating database-level access into cloud key control and defeating client-side encryption...
UBUNTU-CVE-2026-84962
An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google Cloud KMS API calls under the authorized user's identity, escalating database-level access into cloud key control and defeating client-side encryption...
EUVD-2026-70516
An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google Cloud KMS API calls under the authorized user's identity, escalating database-level access into cloud key control and defeating client-side encryption...
CVE-2026-84962
An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google Cloud KMS API calls under the authorized user's identity, escalating database-level access into cloud key control and defeating client-side encryption...
CVE-2026-68870
The Azure Key Vault secrets backend in Apache Airflow's Microsoft Azure provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with this backend, a caller in one team could resolve a...
CVE-2026-68870 Apache Airflow Microsoft Azure provider: microsoft.azure Key Vault backend: team-scope guard bypass resolves another team's Connection or Variable
The Azure Key Vault secrets backend in Apache Airflow's Microsoft Azure provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with this backend, a caller in one team could resolve a...
CVE-2026-68870
The CVE-2026-68870 entry details a vulnerability in the Azure Key Vault secrets backend of Apache Airflow’s Microsoft Azure provider. In multi-team deployments, if a team-scoped lookup misses, a team-agnostic lookup can resolve a secret id that encodes another team’s namespace, allowing a caller ...
CVE-2026-68870
The Azure Key Vault secrets backend in Apache Airflow's Microsoft Azure provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with this backend, a caller in one team could resolve a...
EUVD-2026-55695
The Azure Key Vault secrets backend in Apache Airflow's Microsoft Azure provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with this backend, a caller in one team could resolve a...
CVE-2026-68870 Apache Airflow Microsoft Azure provider: microsoft.azure Key Vault backend: team-scope guard bypass resolves another team's Connection or Variable
The Azure Key Vault secrets backend in Apache Airflow's Microsoft Azure provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with this backend, a caller in one team could resolve a...
CVE-2026-68870 Apache Airflow Microsoft Azure provider: microsoft.azure Key Vault backend: team-scope guard bypass resolves another team's Connection or Variable
The Azure Key Vault secrets backend in Apache Airflow's Microsoft Azure provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with this backend, a caller in one team could resolve a...