258 matches found
offensive-azure
Набор атакующих инструментов, нацеленных на Microsoft Azure, написанных на Python для кроссплатформенной работы. Текущий список инструментов приведён ниже с кратким описанием их функциональности. ./DeviceCode/devicecodeeasymode.py Генерирует код, который должен ввести целевой пользователь Может...
Microsoft365_devicePhish
Microsoft365devicePhish Злоупотребление потоком авторизации OAuth Microsoft 365 для фишинговой атаки Это простой proof-of-concept скрипт, который позволяет атакующему провести фишинговую атаку на поток авторизации OAuth Microsoft 365. С его помощью можно подключиться к конечным точкам OAuth API...
EasyTokens
EasyTokens Сервер фишинга с использованием кода устройства для имитации действий злоумышленника. Захватывает токены OAuth Microsoft 365 через поток Device Authorization Grant. Вдохновлен GraphSpy. Предупреждение — только для авторизованного использования. Этот инструмент предназначен для...
TokenTacticsV2
/ / / / / / / / | \ / / / / /// / \ / / / / / / / / | | / / / / / / / // / , / / / / / / // // / // // / / | |/ / / / // //||// // /,////// |/ TokenTactics v2 이것은 원래 Stephan Borosh @rvrsh3ll와 Bobby Cooke @0xBoku가 작성한 TokenTactics의 업데이트된 버전입니다. Azure JSON Web Token"JWT" 조작 도구 세트 Azure 액세스...
squarephish
SquarePhish SquarePhish — это продвинутый фишинговый инструмент, использующий технику, сочетающую поток аутентификации по OAuth Device Code и QR-коды. Подробнее об использовании потока OAuth Device Code для фишинговых атак см. в PhishInSuits. / | | | | | | | | | | | | | \ \ / | | | |/ | '/ \ /| '...
squarephish
SquarePhish SquarePhish is an advanced phishing tool that uses a technique combining the OAuth Device code authentication flow and QR codes. See PhishInSuits for more details on using OAuth Device Code flow for phishing attacks. / | | | | | | | | | | | | | \ \ / | | | |/ | '/ \ /| ' | / | ' \ | |...
TokenTactics
TokenTactics Azure JSON Web Token "JWT" — набор инструментов для манипуляции Токены доступа Azure позволяют аутентифицироваться на определённых конечных точках от имени пользователя, вошедшего с помощью кода устройства, даже если он использовал многофакторную аутентификацию. Получив токен доступа...
Azure-App-Tools
Azure-App-Tools Azure 애플리케이션에서 사용할 수 있는 도구 모음입니다. https://azure.microsoft.com/en-us/get-started/apps/ 필수 구성 요소 Azure Powershell 모듈 https://docs.microsoft.com/en-us/powershell/azure/install-az-ps?view=azps-3.8.0 예제: 동적 디바이스 코드 @MrUn1k0d3r의 원본 PoC...
CVE-2026-22005-OAuth-2.0-Device-Code-Phishing-Short-Interval-
CVE-2026-22005 – OAuth 2.0 디바이스 코드 피싱 짧은 폴링 간격 프로그램 코드 Python devicecodeserver.py - Authorization server with too-fast polling import time, secrets codes = @app.route'/device/code' def devicecode: code = secrets.tokenurlsafe16 codescode = 'usercode': secrets.tokenhex4, 'status': 'pending' return...
How device code phishing gives scammers access to your account
You receive an invitation to a password-protected meeting, a secure chatroom, or a shared document. To get access, it says, you need to enter a short code on a sign-in page for one of your accounts. The message claims the code will let you open the document or join the meeting. In fact, it approv...
Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises
Microsoft on Tuesday announced the takedown of the EvilTokens device code phishing service that it said used artificial intelligence AI "at every step of the attack chain." The action, carried out with authorization from the U.S. District Court for the Eastern District of Virginia, involved the...
Unmasking EvilTokens: Getting to the root of device code phishing
In this article 1. What is device code phishing? 2. EvilTokens platform and operations 3. EvilTokens phishing emails 4. Mitigation and protection guidance 5. Microsoft Defender XDR detections 6. Hunting queries Following its emergence in February 2026, EvilTokens quickly became one of the most...
Microsoft Azure Entra ID OAuth Device Code Grant Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Azure. Authentication is not required to exploit this vulnerability. The specific flaw exists within the OAuth Device Code Grant endpoint. The issue results from the generation of...
MINI-883G-58RC-5GC6
Bulletin has no description...
Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk
Kali365 is turning a legitimate Microsoft login into a gateway to corporate data. The phishing kit targets US organizations with attacker-controlled device codes that victims approve on Microsoft's real authentication page. Once access and refresh tokens are issued, attackers may retain access to...
Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens
The commercial phishing-as-a-service PhaaS toolkit known as Greatness has become the latest crimeware solution to add support for device code phishing, a rapidly growing cyber threat that abuses the legitimate OAuth 2.0 Device Authorization Grant to bypass Multi-Factor Authentication MFA and seiz...
MINI-P425-4C93-R82H
Bulletin has no description...
MINI-3HRC-HH2V-RVVH
Bulletin has no description...