MicroBurst

MicroBurst: A PowerShell Toolkit for Attacking Azure MicroBurst includes functions and scripts that support Azure Services discovery, weak configuration auditing, and post exploitation actions such as credential dumping. It is intended to be used during penetration tests where Azure is in use...

MicroburstSecretsHunter

MicroBurst Secrets Hunter A PowerShell scanner that combs through MicroBurst Get-AzDomainInfo output for plaintext passwords, keys, connection strings, and other secrets that should never sit unencrypted in an Azure environment. Built for read-only audit workflows : you collect a domain dump with...

AzureAttackKit

AzureAttackKit Collection of Azure Tools to Pull down for Attacking an Env from a windows machine or Cloudshell. Pre-Requisites Git for Windows if you want to auto pull down the latest versions of everything via powershell. Cloning To pull down all the modules you can run the following to pull th...

Microburst uStorekeeper 1.x Remote Arbitrary Commands Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2536/info A vulnerability exists in versions of uStorekeeper Online Shopping System from Microburst Technologies. The script fails to properly validate user-supplied input, allowing remote users to submit URLs containing...

CVE-2001-1160

udirectory.pl in Microburst Technologies uDirectory 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the categoryfile field...

CVE-2001-1160

CVE-2001-1160 affects Microburst Technologies uDirectory 2.0 and earlier. The vulnerability enables remote attackers to execute arbitrary commands by supplying shell metacharacters in the category_file field. No remediation details are provided in the supplied documents. The connected EUVD record...

CVE-2001-1160

udirectory.pl in Microburst Technologies uDirectory 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the categoryfile field...

new advisory

---=== UkR security team - Advisory ===--- uStorekeepertm Online Shopping System - Runtime Script - 'arbitrary file retreival' vulnerability Date: 03.04.2001 Problem: input validation error. Vulnerable products: ustorekeeper.pl version 1.61 probably others, but not tested Product vendor: Microbur...

Microburst uStorekeeper 1.x - Arbitrary Commands

source: https://www.securityfocus.com/bid/2536/info A vulnerability exists in versions of uStorekeeper Online Shopping System from Microburst Technologies. The script fails to properly validate user-supplied input, allowing remote users to submit URLs containing '/../' sequences and arbitrary...