2100 matches found
pe-sieve
Intro PE-sieve is a tool that helps to detect malware running on the system, as well as to collect the potentially malicious material for further analysis. Recognizes and dumps variety of implants within the scanned process: replaced/injected PEs, shellcodes, hooks, and other in-memory patches...
KnockKnock
THIS REPOSITORY HAS BEEN ARCHIVED To view the latest version of KnockKnock or to submit an issue, reference https://github.com/waffl3ss/KnockKnock. KnockKnock - v0.9.9 Please make sure to actually utilize the README. Designed to validate potential usernames by querying OneDrive and/or Microsoft...
TeamsPhisher
... :-++++++=-. .=+++++++++++- .++++++++++++++= :------: :-:--. :+++++++++++++++. .---------- = .-+. :+++++++++++++++. -----------: := :. :--------------------------=++++++++- .------------ .=+ ++ ----------------------------++++++-. :+=-----===: -+-.+: :---------------------------++++=-...
Gogs < 0.14.3 - Unauthenticated Organization Teams Disclosure
Gogs before version 0.14.3 contains an unauthenticated information disclosure vulnerability. The GET /api/v1/orgs/:orgname/teams endpoint returns all teams for any organization without requiring authentication. The route group lacks the reqToken middleware, exposing team IDs, names, descriptions,...
TeamsImplant
TeamsImplant This project is a stealthy teams implant that proxies the urlmon.dll that teams uses compile and throw this bad boy in the teams directory as urlmon.dll and you got yourself a persistence backdoor whenever teams runs by a user or at startup. Features: Mutex so you don't get spammed...
the-bastion
🔒 The Bastion Overview Bastions are a cluster of machines used as the unique entry point by operational teams such as sysadmins, developers, database admins, ... to securely connect to devices servers, virtual machines, cloud instances, network equipment, ..., usually using ssh. The Bastion...
cypherhound
CypherHound A Python3 terminal application that contains Neo4j cyphers for BloodHound data sets with a script to automate importing them into BloodHound CE. Output Samples Terminal HTML Report HTML Report continued Why? BloodHound is a staple tool for every penetration tester. However, there are...
WhatTheHack
What The Hack - Repo Welcome to the What The Hack repo on GitHub. This repo contains Coach content designed for people planning to host a What The Hack event with students in an organization. If you are an organization that is interested in attending or hosting a What The Hack event, please visit...
nanodump
NanoDump A flexible tool that creates a minidump of the LSASS process. Table of contents 1. Usage 2. Features 3. Combining Techniques 4. Examples 5. HTTPS Redirectors 1. Usage usage: Z:\nanodump.x64.exe --write C:\Windows\Temp\doc.docx --valid --duplicate --elevate-handle --duplicate-elevate...
TeamsNTLMLeak
Description When a user navigates to a "Website" tab that directs to a specially designed webpage, it can result in the exposure of the NTLM hash through the activation of an Office URL scheme, thereby reducing the process to a single-click path for the leak. If one attempts to open a link in the...
teams_dump
PoC for dumping and decrypting cookies in the latest version of Microsoft Teams extract.py just dumps without arguments extract.exe is just extract.py packed into an exe teamsdump.py List values in the database python.exe .\teamsdump.py teams --list Table: meta Columns in meta: key, value...
Worldwide Microsoft 365 outage disrupts Outlook, SharePoint, Teams, and more [updated]
This is a developing story. We’ll update this article as more information becomes available. .kadence-column488461efee3d-5c .kt-inside-inner-colpadding-top:20px;padding-right:20px;padding-bottom:10px;padding-left:20px;.kadence-column488461efee3d-5c...
TeamsUserEnum
UserEnumTeams Description Sometimes user enumeration could be sometimes useful during the reconnaissance of an assessment. This tool will determine if an email is registered on teams or not. More details on the immunIT's blog Usage .\UserEnumTeams userenum --help Users can be enumerated on...
Teamsniper
Teamsniper Teamsniper is a tool for fetching keywords in a Microsoft Teams such as passwords, emails, database, etc.. Usage Help Options usage: Teamsniper.py -h -d DATABASE -a AUTHTOKEN -s SEARCH Teamsniper is a tool for fetching the given keywords in Microsoft Teams. options: -h, --help show thi...
MSTeams---Vulnerability---Remediation
🛡️ Remediation of CVE-2025-53783: Microsoft Teams RCE 📝 Project Overview This project demonstrates a Vulnerability Management Workflow. Using an Azure VM, I identified a high-severity "Remote Code Execution" RCE flaw in Microsoft Teams, verified its existence through PowerShell, and deployed a...
msteams
msteams A Mythic C2 Profile that uses the Microsoft Graph API to communicate through a Microsoft Teams channel. How It Works Agent Microsoft Teams Channel C2 Server Mythic 1. The agent authenticates to Microsoft Entra ID via OAuth2 client credentials 2. Posts its Mythic message base64-encoded,...
convoC2
convoC2 Table of Contents Introduction Demo Usage Requirements Inspiration Contribute Introduction Command and Control infrastructure that allows Red Teamers to execute system commands on compromised hosts through Microsoft Teams. It infiltrates data into hidden span tags in Microsoft Teams...
CVE-2026-69901
Origin validation error in Microsoft Teams for Android allows an unauthorized attacker to perform spoofing over a network...