goblob

Goblob 🫐 Goblob is a lightweight and fast enumeration tool designed to aid in the discovery of sensitive information exposed publicy in Azure blobs, which can be useful for various research purposes such as vulnerability assessments, penetration testing, and reconnaissance. Warning. Goblob will...

BlobHunter

BlobHunter An opensource tool for scanning Azure blob storage accounts for publicly opened blobs. BlobHunter is a part of Hunting Azure Blobs Exposes Millions of Sensitive Files research. Overview BlobHunter helps you identify Azure blob storage containers which store files that are publicly...

CVE-2025-10681

CVE-2025-10681: Hardcoded Azure Blob Storage Account Key Advisory Field| Value ---|--- CVE| CVE-2025-10681 ICSA| ICSA-26-055-03 CVSS 3.1| 8.6 High Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L CWE| CWE-798 Use of Hard-coded Credentials Researcher| Michael Groberman — Gr0m Published|...

CVE-2026-66906

CVE-2026-66906 — camel-azure-storage-blob downloadBlobToFile path traversal Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.5.13 + camel-azure-storage-blob...

CVE-2026-55726

CVE-2026-55726: Publicly Listable Azure Blob Storage Container device logs Advisory Field| Value ---|--- CVE| CVE-2026-55726 ICSA| ICSA-26-183-03 Gardyn IoT Hub CVSS 3.1| 5.3 Medium Vector 3.1| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Vector 4.0|...

Cobaltstrike_BOFLoader

CobaltstrikeBOFLoader This is an open source port/reimplementation of the Cobalt Strike BOF Loader as is. For the most part, everything is done as in the original Beacon + Teamserver in Cobalt Strike. This includes shortcomings that are resolved in other open source COFF loaders such as the...

ClickOnceBlobber

ClickOnce AppDomainManager Injection Toolkit Weaponize signed .NET ClickOnce applications for initial access by hijacking a dependency DLL via AppDomainManager injection and loading a C port of ProxyBlob Agent. Ships with a C port of ProxyBlob — a SOCKS5 proxy that tunnels all traffic through Azu...

CVE-2026-111663 Chaskiq through 2.0.3 SSRF via createUrlUpload GraphQL Mutation

Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to fetch arbitrary URLs via the createUrlUpload GraphQL mutation. Attackers can submit internal URLs, including cloud instance metadata endpoints, through POST /graphql and retrieve th...

CVE-2026-111663

The Chaskiq software (versions through 2.0.3 ) is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability via the createUrlUpload GraphQL mutation. This flaw allows unauthenticated attackers to submit arbitrary URLs, such as internal cloud instance metadata endpoints, through a POST /gra...

azure-pentesting-suite

azure-pentesting-suite azpt 🚧 Public beta. azpt is under active development — commands, flags, and output formats may still change between releases. Bug reports and feedback are welcome via GitHub issues. azpt is a Go toolkit for authorized Azure security assessments. It works from two...

SmuggleMyPayload

SmuggleMyPayload SmuggleMyPayload is an HTML Smuggling toolkit for generating HTML pages that embed and reconstruct files using JavaScript. It provides multiple HTML Smuggling methods, payload encoding options, JavaScript variations, and several built-in HTML templates. Features Multiple HTML...

gMSA_Dumper

gMSADumper Reads any gMSA password blobs the user can access and parses the values. gMSADumper.py -h...

CVE-2026-111093

In JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint allowed reading arbitrary files...

CVE-2026-111093

JetBrains Datalore versions prior to 2026.2.1 are vulnerable to an unauthenticated path traversal vulnerability within the report blob endpoint . This flaw, categorized as CWE-23 , allows an attacker to perform arbitrary file reading on the system. The vulnerability has a CVSS 3.1 score of 7.5 (H...

EUVD-2026-102146

In JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint allowed reading arbitrary files...

CVE-2026-111093

In JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint allowed reading arbitrary files...

bcm4360-wpa3

WPA3-SAE + 802.11w on the Broadcom BCM4360 closed wl blob Apple/Broadcom never gave the BCM4360 14e4:43a0 WPA3. Its only Linux driver is the closed broadcom-sta wl blob; brcmfmac can't drive it. This adds WPA3-SAE + full 802.11w PMF to that closed blob — entirely from host software, no firmware...

EUVD-2026-101732

n8n before 1.123.83, 2.41.4, and 2.42.1 contains a stored cross-site scripting vulnerability in the file-preview modal, which re-publishes binary data as an unsandboxed same-origin blob URL. A member who uploads a crafted item can run script in the n8n origin of whoever previews it, typically the...

CVE-2026-110849

n8n before 1.123.83, 2.41.4, and 2.42.1 contains a stored cross-site scripting vulnerability in the file-preview modal, which re-publishes binary data as an unsandboxed same-origin blob URL. A member who uploads a crafted item can run script in the n8n origin of whoever previews it, typically the...

CVE-2026-110849

The n8n platform (versions before 1.123.83 , 2.41.4 , and 2.42.1 ) is vulnerable to a stored cross-site scripting (XSS) flaw in the file-preview modal . The root cause is that the application re-publishes binary data as an unsandboxed same-origin blob URL . An attacker who uploads a crafted item ...