monkey365

Monkey365 は、Microsoft 365、Azure、Microsoft Entra ID 向けのオープンソースのセキュリティ評価フレームワークです。セキュリティ専門家、コンサルタント、管理者、インシデント対応担当者が、設定ミスの特定、クラウドセキュリティ態勢の確認、業界のセキュリティベストプラクティスやコンプライアンス基準に照らした環境の評価を行うのに役立ちます。 Monkey365 は、複雑な API を学習したり、複数の Microsoft モジュールをインストールしたり、複数の管理ポータルを操作したりする必要なく、Microsoft...

ScubaGear

ScubaGear es una herramienta de evaluación que verifica que la configuración de un tenant de Microsoft 365 M365 cumple con las políticas descritas en los documentos de la Línea Base de Configuración Segura de Secure Cloud Business Applications SCuBA. !NOTE Esta documentación se puede leer mediant...

Windows Tooling Updates: OleView.NET

Posted by James Forshaw, Google Project Zero This is a short blog post about some recent improvements I've been making to the OleView.NET tool which has been released as part of version 1.16. The tool is designed to discover the attack surface of Windows COM and find security vulnerabilities such...

Microsoft PowerShell Gallery psg-prod-centralus Uncontrolled Search Path Element Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft PowerShell Gallery. Authentication is not required to exploit this vulnerability. The specific flaw exists within the installation of PowerShell Gallery. When installed from the official...

Experts Uncover Weaknesses in PowerShell Gallery Enabling Supply Chain Attacks

Active flaws in the PowerShell Gallery could be weaponized by threat actors to pull off supply chain attacks against the registry's users. "These flaws make typosquatting attacks inevitable in this registry, while also making it extremely difficult for users to identify the true owner of a...

AutomatedLab - A Provisioning Solution And Framework That Lets You Deploy Complex Labs On HyperV And Azure With Simple PowerShell Scripts

AutomatedLab AL enables you to setup test and lab environments on Hyper-v or Azure with multiple products or just a single VM in a very short time. There are only two requirements you need to make sure: You need the DVD ISO images and a Hyper-V host or an Azure subscription. Requirements Apart fr...

PowerShellGet Module WDAC Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in the PowerShellGet V2 module. An attacker who successfully exploited this vulnerability could bypass WDAC Windows Defender Application Control policy and execute arbitrary code on a policy locked-down machine. An attacker must have administrator...

Azure Automation Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Azure Automation “RunAs account” runbooks for users with contributor role. This vulnerability could potentially allow members of an organization to access Key Vault secrets through a runbook, even if these members would personally not have access ...