404 matches found
linux-entra-sso-PoC
Summary CVE status: requested, pending assignment. This finding is published as GHSA-g9vc-5j77-f2cm. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-linux-entra-sso-PoC and this banner is replaced with the CVE link...
EntraPassTheCert
EntraPassTheCert EntraPassTheCert is a post-exploitation tool that allows attackers to request Entra ID's user P2P certificate and authenticate to a remote Entra joinned machine with it. root@kitploit: $ python3 entraptc.py -h usage: entraptc.py -h --debug requestp2pcert,smb,rdp,winrm,rpc...
hawk
Hawk Documentation and Resources Visit hawkforensics.io for comprehensive documentation including: Detailed installation and permissions guides Step-by-step tutorials and "How to" videos Troubleshooting help Best practices and usage examples What is Hawk? Hawk is a free, open-source PowerShell...
TATS
TATS — Token Analysis and Tracking System Track OAuth 2.0, OIDC, and Microsoft Entra ID tokens across captured network traffic. Ingests Burp Suite XML exports, mitmproxy flow files, or live Chrome DevTools Protocol streams into a single SQLite database, then serves an interactive web dashboard fo...
ResetSpy
ResetSpy Probe Microsoft's Self-Service Password Reset SSPR endpoint to enumerate registeted verification methods and flag any that lack a strong second factor. Provides user enumeration and an approximation of MFA posture across Entra accounts. !NOTE As of August 2026, Microsoft has removed the...
CVE-2026-69836-EXP
CVE-2026-69836 Entra ID Unauthenticated RCE Proof of Concept Overview CVE-2026-69836 is a critical unauthenticated remote code execution vulnerability in Microsoft Entra ID due to improper deserialization of untrusted data CWE-502. The flaw allows attackers to execute arbitrary code over the...
Release Information for Veeam Backup for Microsoft 365 8.6
Requirements This release can be used to: upgrade an existing v8, v8.1, v8.2, v8.3, v8.4, or v8.5 deployment of Veeam Backup for Microsoft 365 to v8.6. install a new deployment of Veeam Backup for Microsoft 365 v8.6. After installing this release, the Veeam Backup for Microsoft 365 build number...
askWAM
askWAM askWAM requests Microsoft Entra access tokens silently through Windows Web Account Manager WAM. It ships as a .NET Framework client, a standalone native x64 client, and an x64 Beacon Object File with a CNA command adapter. All frontends can enumerate accounts visible to the client and targ...
untitledgoosetool
Untitled Goose Tool The Goose is loose. Table of Contents About Getting Started Prerequisites Requirements Installing Usage Config GUI Auth Csv Honk Messagetrace Recommended Default Workflow Recommended Workflow for UAL Call with Time Bounds Considerations Known Issues Acknowledgements Contributi...
Azure
Azure Offensive Security Toolkit A collection of Bash and PowerShell scripts for Azure security assessments, covering IAM privilege escalation, container security, Key Vault exposure, Entra ID configuration, and more. Designed to run in Azure Cloud Shell or any authenticated terminal. Scripts IAM...
The vulnerability of the compatibility package for Microsoft Azure Entra ID allows a perpetrator to circumvent the authentication process by using an alternative path or channel, thereby allowing them to increase their privileges.
The vulnerability of the compatibility package for Microsoft Azure Entra ID involves bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor to gain increased privileges...
The vulnerability of the compatibility package for Microsoft Azure Entra ID, related to the absence of authentication, allows a perpetrator to escalate their privileges.
The vulnerability of the compatibility package for Microsoft Azure Entra ID is related to the absence of authentication. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
Microsoft Azure Entra ID OAuth Device Code Grant Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Azure. Authentication is not required to exploit this vulnerability. The specific flaw exists within the OAuth Device Code Grant endpoint. The issue results from the generation of...
CVE-2026-83941
Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network...
CVE-2026-83941
CVE-2026-83941 is a missing authorization vulnerability in Entra ID (Microsoft's identity and access management service) that allows an attacker with low privileges to elevate privileges over a network. The assigned CVSS 3.1 score is 9.9 (CRITICAL) with a scope change, indicating high impact on b...
EUVD-2026-73173
Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network...
Microsoft Entra ID Elevation of Privilege Vulnerability
Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network...
Entra ID Elevation of Privilege Vulnerability
Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network...
KLA91263 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of...