teams_dump

最新版Microsoft Teamsのクッキーをダンプおよび復号化するPoC extract.pyは引数なしでダンプするだけ extract.exeはextract.pyをexeにパッケージ化したもの teamsdump.py データベースの値を一覧表示 python.exe .\teamsdump.py teams --list Table: meta Columns in meta: key, value -------------------------------------------------- Table: cookies Columns in cookies:...

teams_dump

PoC for dumping and decrypting cookies in the latest version of Microsoft Teams extract.py just dumps without arguments extract.exe is just extract.py packed into an exe teamsdump.py List values in the database python.exe .\teamsdump.py teams --list Table: meta Columns in meta: key, value...

Microsoft-Edge-Information-Disclosure

Microsoft-Edge-情報漏洩 CVE-2024-30056 Microsoft Edge（Chromiumベース）情報漏洩の脆弱性 これはMicrosoft Edge（Chromiumベース）の脆弱性です。攻撃者はユーザーを騙して、本人の知らないうちに機密情報を漏洩させることができました。 Poc: PoC CVE-2024-30056 body font-family: Arial, sans-serif; margin: 20px; h1 color: 333; pre background-color: f5f5f5; padding: 10px; border: 1px...

teams-cookies-bof

teams-cookies-bof Teamsのクッキーを盗み取る、ms-teams.exeプロセス内で実行中。関連記事: https://tierzerosecurity.co.nz/2025/11/03/teams-cookies-bof.html 基盤: https://blog.randorisec.fr/ms-teams-access-tokens/. このツールは Cookie-Monster-BOF をベースにしています。 BOFは暗号化キーを抽出し、Cookiesファイルへのハンドルを持つ msedgewebview2.exe...

Web-Penetration-Test

Web-Penetration-Test WordPress の脆弱性 CVE-2025-34077 の悪用、Cookie インジェクションによる認証バイパス、root への権限昇格。サイバーセキュリティ専門コースの一環として実施。 Day 1: 初めての Web サイトをハッキング ラボレポート: 「BigWear」サーバーの悪用 サイバーセキュリティへの旅の最初のセッションで、私は神話から離れることができました。セキュリティの欠陥を特定するのに数学の天才や熟練プログラマーである必要はないと学びました。必要なのは創造性、論理的思考、そして確固たる方法論 です。 ステップバイステップ:...

GlobalUnProtect

GlobalUnProtect Windows クライアントインストールから GlobalProtect の設定、クッキー、HIP ファイルを復号化して収集するための PoC ツールです。 ブログ記事: https://rotarydrone.medium.com/4a1d8fc7773e 使い方 スタンドアロンで、または execute-assembly 等によるインメモリで実行します。すべての内容をインメモリ ZIP に収集し、指定した場所に書き込みます。 GlobalUnProtect.exe Usage: GlobalUnProtect.exe...

XSS-Catcher

XSS Catcher Flask、VueJS、PostgreSQL上で動作するブラインドXSS検出およびXSSデータキャプチャフレームワーク。 XSS...

Adamantium-Thief

🔓 Adamantium-Thief Chromium ベースのブラウザからパスワード、クレジットカード、履歴、Cookie、ブックマーク、オートフィルを取得します。 Chrome 80 以降に対応しています！ Firefox のパスワード復号化ツールが必要ですか？ 🌿 例: 🔑 ブラウザからパスワードを取得: Stealer.exe PASSWORDS 💳 ブラウザからクレジットカードを取得: Stealer.exe CREDITCARDS 🕘 ブラウザから履歴を取得: Stealer.exe HISTORY 📑 ブラウザからブックマークを取得: Stealer.exe BOOKMAR...

HPE System Management - Cross-Site Scripting

HPE System Management contains a cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other...

CandidATS 3.0.0 - Cross-Site Scripting

CandidATS 3.0.0 contains a cross-site scripting vulnerability via the page parameter of the ajax.php resource. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...

ICTBroadcast - Command Injection

The ICTBroadcast application unsafely passes session cookie data to shell processing, allowing an attacker to inject shell commands into a session cookie that get executed on the server. This results in unauthenticated remote code execution in the session handling. Versions 7.4 and below are know...

OpenCATS 0.9.6 - Cross-Site Scripting

OpenCATS 0.9.6 contains a cross-site scripting vulnerability via the joborderID parameter. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch...

Lightdash v0.1024.6 - Server-Side Request Forgery

Server-Side Request Forgery “SSRF” in the export dashboard functionality of Lightdash version 0.1024.6 allows remote authenticated threat actors to obtain the session cookie of any user who exports a crafted dashboard. When they are exported, dashboards containing HTML elements can trigger HTTP...

Service Finder Bookings - Authentication Bypass

Service Finder Bookings WordPress plugin = 6.0 contains a privilege escalation caused by improper validation of user cookie in servicefinderswitchback function, letting unauthenticated attackers login as any user including admins. id: CVE-2025-5947 info: name: Service Finder Bookings -...

H3C SSL VPN <=2022-07-10 - Cross-Site Scripting

H3C SSL VPN 2022-07-10 and prior contains a cookie-based cross-site scripting vulnerability in wnm/login/login.json svpnlang. id: CVE-2022-35416 info: name: H3C SSL VPN =2022-07-10 - Cross-Site Scripting author: 0x240x23elu severity: medium description: | H3C SSL VPN 2022-07-10 and prior contains...

WordPress FlatPM <3.0.13 - Cross-Site Scripting

WordPress FlatPM plugin before 3.0.13 contains a cross-site scripting vulnerability. The plugin does not sanitize and escape certain parameters before outputting them back in pages, which can be exploited against high privilege users such as admin. An attacker can steal cookie-based authenticatio...

PrestaShop lgcookieslaw - SQL Injection

The EU Cookie Law GDPR Banner + Blocker PrestaShop module before 2.1.3 allows blind SQL injection via the lglaw or lgcookieslaw cookie used to store user consent choices. id: CVE-2022-44727 info: name: PrestaShop lgcookieslaw - SQL Injection author: mastercho severity: critical description: | The...

YesWiki < 4.5.4 - Cross-Site Scripting

YesWiki 4.5.4 contains a reflected cross-site scripting caused by unsanitized idformulaire parameter in /?BazaR endpoint, letting attackers steal cookies and hijack sessions, exploit requires user to click malicious link. id: CVE-2025-46550 info: name: YesWiki 4.5.4 - Cross-Site Scripting author:...

Extreme Management Center 8.4.1.24 - Cross-Site Scripting

Extreme Management Center 8.4.1.24 contains a cross-site scripting vulnerability via a parameter in a GET request. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...

WordPress Tutor LMS <2.0.10 - Cross Site Scripting

WordPress Tutor LMS plugin before 2.0.10 contains a cross-site scripting vulnerability. The plugin does not sanitize and escape the resetkey and userid parameters before outputting then back in attributes. An attacker can inject arbitrary script in the browser of an unsuspecting user in the conte...