1049 matches found
oauthseeker
OAuthSeeker OAuthSeeker es una herramienta de equipo rojo para realizar ataques de phishing utilizando aplicaciones OAuth maliciosas para comprometer identidades de usuarios en Microsoft Azure y Office365. 🚀 Características principales OAuthSeeker proporciona las siguientes características...
offensive-azure
Collection of offensive tools targeting Microsoft Azure written in Python to be platform agnostic. The current list of tools can be found below with a brief description of their functionality. ./DeviceCode/devicecodeeasymode.py Generates a code to be entered by the target user Can be used for...
offensive-azure
Colección de herramientas ofensivas dirigidas a Microsoft Azure escritas en Python para ser independientes de la plataforma. La lista actual de herramientas se puede encontrar a continuación con una breve descripción de su funcionalidad. ./DeviceCode/devicecodeeasymode.py Genera un código para se...
cloudsploit
CloudSploit by Aqua - Cloud Security Scans Quick Start Generic root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker buil...
AzureHound
AzureHound El recopilador de datos de BloodHound para Microsoft Azure Obtener AzureHound Binarios de lanzamiento Descarga el binario adecuado para tu plataforma desde uno de nuestros Lanzamientos. Lanzamiento continuo El lanzamiento continuo contiene binarios precompilados que se mantienen...
AzureADAssessment
Evaluación de Microsoft Azure AD Guía del evaluador Si usted es un empleado o partner de Microsoft que realiza la evaluación para un cliente, consulte la Wiki para la Guía de evaluación. Instalación desde la Galería de PowerShell Si encuentra algún error, consulte la sección de preguntas frecuent...
GO-2026-6259 vulnerabilities
Vulnerabilities for packages: velero-plugin-for-microsoft-azure, velero-plugin-for-gcp, velero-plugin-for-aws, velero-plugin-for-aws-fips, velero-plugin-for-microsoft-azure-fips, velero-plugin-for-gcp-fips...
GO-2026-6259 vulnerabilities
Vulnerabilities for packages: velero-plugin-for-aws, velero-plugin-for-microsoft-azure...
CVE-2026-32637 vulnerabilities
Vulnerabilities for packages: velero-plugin-for-aws, velero-plugin-for-microsoft-azure...
GHSA-J2G6-362Q-6QC6 vulnerabilities
Vulnerabilities for packages: velero-plugin-for-aws, velero-plugin-for-microsoft-azure...
CVE-2026-69400 Azure Logic Apps Elevation of Privilege Vulnerability
...
CVE-2026-68782 Azure SQL Database Elevation of Privilege Vulnerability
...
CVE-2026-66309 Azure SQL Database Elevation of Privilege Vulnerability
...
KLA91236 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability...
CVE-2026-71331
Integer overflow or wraparound in Windows Device Health Attestation DHA allows an unauthorized attacker to execute code over a network...
EUVD-2026-56771
Integer overflow or wraparound in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network...
CVE-2026-63522
Azure SQL Database is the affected product for CVE-2026-63522, described as an incorrect permission assignment for a critical resource that allows an authorized attacker to elevate privileges locally. The issue has a base CVSSv3.1 score of 7.8 (HIGH) with LOCAL access, low attack complexity, and ...
EUVD-2026-56746
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network...
Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows Device Health Attestation DHA allows an unauthorized attacker to execute code over a network...
Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Health Attestation DHA allows an unauthorized attacker to execute code over a network...