WhatTheHack

What The Hack - Repo Welcome to the What The Hack repo on GitHub. This repo contains Coach content designed for people planning to host a What The Hack event with students in an organization. If you are an organization that is interested in attending or hosting a What The Hack event, please visit...

BTPS-SecPack

El Paquete de Seguridad PowerShell del Equipo Azul Usar Microsoft Teams para Alertas en Lugar de Correo Electrónico Si deseas usar Microsoft Teams para enviar alertas en lugar de usar correo electrónico, deberás cargar la rama microsoft-teams de este repositorio, que tiene las modificaciones para...

Teamsniper

Teamsniper Teamsniper is a tool for fetching keywords in a Microsoft Teams such as passwords, emails, database, etc.. Usage Help Options root@kitploit: usage: Teamsniper.py -h -d DATABASE -a AUTHTOKEN -s SEARCH Teamsniper is a tool for fetching the given keywords in Microsoft Teams. options: -h,...

teams_dump

PoC para volcar y descifrar cookies en la última versión de Microsoft Teams extract.py solo vuelca sin argumentos extract.exe es solo extract.py empaquetado en un exe teamsdump.py List valores en la base de datos root@kitploit: python.exe .\teamsdump.py teams --list Table: meta Columns in meta:...

teams_dump

PoC for dumping and decrypting cookies in the latest version of Microsoft Teams extract.py just dumps without arguments extract.exe is just extract.py packed into an exe teamsdump.py List values in the database root@kitploit: python.exe .\teamsdump.py teams --list Table: meta Columns in meta: key...

TeamsUserEnum

UserEnumTeams Descripción A veces la enumeración de usuarios puede ser útil durante el reconocimiento de una evaluación. Esta herramienta determina si un correo electrónico está registrado en Teams o no. Más detalles en el blog de immunIT Uso root@kitploit: .\UserEnumTeams userenum --help Users c...

TeamsImplant

TeamsImplant Este proyecto es un implante sigiloso para Teams que actúa como proxy de la urlmon.dll que Teams utiliza. Compila y coloca este archivo en el directorio de Teams como urlmon.dll y tendrás una puerta trasera persistente cada vez que Teams se ejecute por un usuario o al inicio...

TeamsNTLMLeak

Description When a user navigates to a "Website" tab that directs to a specially designed webpage, it can result in the exposure of the NTLM hash through the activation of an Office URL scheme, thereby reducing the process to a single-click path for the leak. If one attempts to open a link in the...

KnockKnock

ESTE REPOSITORIO HA SIDO ARCHIVADO Para ver la última versión de KnockKnock o enviar un issue, consulte https://github.com/waffl3ss/KnockKnock. KnockKnock - v0.9.9 Asegúrese de leer realmente el README. Diseñado para validar nombres de usuario potenciales consultando OneDrive y/o Microsoft Teams,...

MSTeams---Vulnerability---Remediation

🛡️ Remediation of CVE-2025-53783: Microsoft Teams RCE 📝 Project Overview This project demonstrates a Vulnerability Management Workflow. Using an Azure VM, I identified a high-severity "Remote Code Execution" RCE flaw in Microsoft Teams, verified its existence through PowerShell, and deployed a...

CVE-2026-69559

Origin validation error in Microsoft Teams for Android allows an authorized attacker to disclose information over a network...

CVE-2026-65812

Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network...

CVE-2026-65812

Microsoft Teams for Android is affected by an information disclosure vulnerability caused by the insertion of sensitive information into sent data, allowing an authorized attacker to disclose information over a network. The CVSS 3.1 score is 6.8 (Medium) , with a network attack vector, low comple...

EUVD-2026-73739

Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network...

EUVD-2026-73702

Origin validation error in Microsoft Teams for Android allows an authorized attacker to disclose information over a network...

CVE-2026-69559

CVE-2026-69559 is an origin validation error in Microsoft Teams for Android that allows an authorized attacker to disclose information over a network. The vulnerability carries a CVSS 3.1 base score of 5.8 (Medium) with a network vector, high attack complexity, low privileges required, and user i...

PT-2026-87217

Alert for IT teams: Microsoft just patched a severe info-disclosure flaw in Teams for Android CVE-2026-65812 that could leak credentials. The bug allows attackers with low privileges to trick a user into interacting with crafted content over the network. Defenders need to verify that Android...

ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories

The worst part is how normal these attacks look. A call from IT. A shared file. A trusted app. A simple request to click “Allow.” Why break in when someone might open the door? That idea runs through this edition. Attackers use real tools, fake login pages, old account links, and software guides...

CVE-2026-72846

Lightdash stores the webhook URL supplied with a scheduled delivery and later posts to it from sendWebhook in packages/backend/src/clients/GoogleChat/GoogleChatClient.ts and in packages/backend/src/clients/MicrosoftTeams/MicrosoftTeamsClient.ts. In affected versions both call fetch on the stored...

CVE-2026-72846 Lightdash Scheduled Delivery Webhook URLs Are Not Validated, Allowing Server-Side Request Forgery

Lightdash stores the webhook URL supplied with a scheduled delivery and later posts to it from sendWebhook in packages/backend/src/clients/GoogleChat/GoogleChatClient.ts and in packages/backend/src/clients/MicrosoftTeams/MicrosoftTeamsClient.ts. In affected versions both call fetch on the stored...