pe-sieve

Intro PE-sieve is a tool that helps to detect malware running on the system, as well as to collect the potentially malicious material for further analysis. Recognizes and dumps variety of implants within the scanned process: replaced/injected PEs, shellcodes, hooks, and other in-memory patches...

BTPS-SecPack

The Blue Team PowerShell Security Package Using Microsoft Teams for Alerts Instead of Email If you wish to use Microsoft Teams for sending alerts instead of using email you will want to load the microsoft-teams branch for this repository which has the Teams alert modifications. It will take me a...

teams-cookies-bof

teams-cookies-bof Steal cookies for Teams, while running within the ms-teams.exe process. Related post: https://tierzerosecurity.co.nz/2025/11/03/teams-cookies-bof.html Based on: https://blog.randorisec.fr/ms-teams-access-tokens/. This tool is heavily based on the Cookie-Monster-BOF. The BOF will...

WhatTheHack

What The Hack - Repo Welcome to the What The Hack repo on GitHub. This repo contains Coach content designed for people planning to host a What The Hack event with students in an organization. If you are an organization that is interested in attending or hosting a What The Hack event, please visit...

TeamsPhisher

root@kitploit: ... :-++++++=-. .=+++++++++++- .++++++++++++++= :------: :-:--. :+++++++++++++++. .---------- = .-+. :+++++++++++++++. -----------: := :. :--------------------------=++++++++- .------------ .=+ ++ ----------------------------++++++-. :+=-----===: -+-.+:...

TeamsImplant

TeamsImplant This project is a stealthy teams implant that proxies the urlmon.dll that teams uses compile and throw this bad boy in the teams directory as urlmon.dll and you got yourself a persistence backdoor whenever teams runs by a user or at startup. Features: Mutex so you don't get spammed...

TeamsUserEnum

UserEnumTeams Description Sometimes user enumeration could be sometimes useful during the reconnaissance of an assessment. This tool will determine if an email is registered on teams or not. More details on the immunIT's blog Usage root@kitploit: .\UserEnumTeams userenum --help Users can be...

teams_dump

PoC for dumping and decrypting cookies in the latest version of Microsoft Teams extract.py just dumps without arguments extract.exe is just extract.py packed into an exe teamsdump.py List values in the database root@kitploit: python.exe .\teamsdump.py teams --list Table: meta Columns in meta: key...

the-bastion

🔒 The Bastion Overview Bastions are a cluster of machines used as the unique entry point by operational teams such as sysadmins, developers, database admins, ... to securely connect to devices servers, virtual machines, cloud instances, network equipment, ..., usually using ssh. The Bastion...

cypherhound

CypherHound A Python3 terminal application that contains Neo4j cyphers for BloodHound data sets with a script to automate importing them into BloodHound CE. Output Samples Terminal HTML Report HTML Report continued Why? BloodHound is a staple tool for every penetration tester. However, there are...

Gogs < 0.14.3 - Unauthenticated Organization Teams Disclosure

Gogs before version 0.14.3 contains an unauthenticated information disclosure vulnerability. The GET /api/v1/orgs/:orgname/teams endpoint returns all teams for any organization without requiring authentication. The route group lacks the reqToken middleware, exposing team IDs, names, descriptions,...

teams_dump

在最新版 Microsoft Teams 中导出和解密 Cookie 的 PoC extract.py 不传参直接导出 extract.exe 只是将 extract.py 打包成 exe teamsdump.py 列出数据库中的值 root@kitploit: python.exe .\teamsdump.py teams --list Table: meta Columns in meta: key, value -------------------------------------------------- Table: cookies Columns in cookies:...

Teamsniper

Teamsniper Teamsniper es una herramienta para buscar palabras clave en Microsoft Teams, como contraseñas, correos electrónicos, base de datos, etc.. Uso Opciones de Ayuda root@kitploit: usage: Teamsniper.py -h -d DATABASE -a AUTHTOKEN -s SEARCH Teamsniper is a tool for fetching the given keywords...

TeamsNTLMLeak

Descripción Cuando un usuario navega a una pestaña "Website" que dirige a una página web especialmente diseñada, puede resultar en la exposición del hash NTLM mediante la activación de un esquema de URL de Office, reduciendo así el proceso a una ruta de un solo clic para la fuga. Si se intenta...

KnockKnock

THIS REPOSITORY HAS BEEN ARCHIVED To view the latest version of KnockKnock or to submit an issue, reference https://github.com/waffl3ss/KnockKnock. KnockKnock - v0.9.9 Please make sure to actually utilize the README. Designed to validate potential usernames by querying OneDrive and/or Microsoft...

Introducing AI Assistant for Akamai Web Security Analytics

Discover how AI Assistant for Akamai Web Security Analytics helps SOC and AppSec teams investigate events faster and take guided action with natural language...

MSTeams---Vulnerability---Remediation

🛡️ CVE-2025-53783 修复：Microsoft Teams 远程代码执行漏洞 📝 项目概述 本项目演示了一个漏洞管理工作流程 。通过使用 Azure 虚拟机，我识别出 Microsoft Teams 中存在一个高危的“远程代码执行”（RCE）漏洞，通过 PowerShell 验证了其存在，并使用 Windows 包管理器部署了程序化修复。 问题描述 Microsoft Teams 桌面版（版本低于 25122.1415.3698.6812）存在一个基于堆的缓冲区溢出漏洞。这使得未经授权的攻击者能够通过网络执行恶意代码——本质上为系统打开了“后门”。 🚨 发现过程 我首先在...

CVE-2026-69559

Origin validation error in Microsoft Teams for Android allows an authorized attacker to disclose information over a network...

CVE-2026-65812

Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network...

CVE-2026-65812

Microsoft Teams for Android is affected by an information disclosure vulnerability caused by the insertion of sensitive information into sent data, allowing an authorized attacker to disclose information over a network. The CVSS 3.1 score is 6.8 (Medium) , with a network attack vector, low comple...