OutOfTune

OutOfTune 元のPytuneに触発されたOutOfTuneは、Entra IDに不正なデバイスを登録し、Intune MDMに登録し、その結果のコンプライアンス状態を確認します。 現在はWindowsデバイスのみ対応しています（これが私の主な目的でした）。将来的に他のOSも追加するかもしれません。 付属ブログ: https://stra-x.github.io/Re-Engineering-Pytune-Rogue-devices-in-the-age-of-conditional-access/...

aftermath

概要 Aftermathは、Swiftベースのオープンソースインシデントレスポンスフレームワークです。 Aftermathは、防御側が侵害されたホストからデータを収集し、その後分析するために活用できます。AftermathはMDMから展開するのが理想的ですが、感染したユーザーのコマンドラインから独立して実行することも可能です。 Aftermathは最初に一連のモジュールを実行して収集を行います。出力は、-o または --output オプションで指定した場所に書き込まれるか、デフォルトでは /tmp ディレクトリに書き込まれます。...

aftermath

About Aftermath is a Swift-based, open-source incident response framework. Aftermath can be leveraged by defenders in order to collect and subsequently analyze the data from the compromised host. Aftermath can be deployed from an MDM ideally, but it can also run independently from the infected...

WindowsMDM-LPE-0Day

WindowsMDM-LPE-0Day Windows 11で最適に動作します CVE-2021-24084 Windows ローカル権限昇格 は2020年から公式にパッチが適用されていません。そのため、依然としてゼロデイです。 スクリーンショット: Youtube : https://youtu.be/lhT9m68GgL4 影響を受けるWindowsバージョン Windows 10 1803 Windows 10 1809 Windows 10 1909 Windows 10 2004 Windows 10 20h2 Windows Server 2016 1909 Windows...

santa

Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...

CVE-2026-22011-iOS-MDM-Profile-Delivery-over-HTTP

CVE-2026-22011 – iOS MDM 配置文件通过 HTTP 传输 程序代码（Python Flask MDM 服务器） root@kitploit: mdmserver.py - Serves enrollment profile over plain HTTP from flask import Flask, sendfile app = Flaskname @app.route'/enroll.mobileconfig' def serveprofile: Vulnerability: profile delivered without HTTPS return...

CVE-2013-1081

此脚本利用了Novell Zenworks移动设备管理中存在的一个本地文件包含（LFI）漏洞。 Metasploit模块 - msf use auxiliary/scanner/http/novellmdmcreds msf auxiliarynovellmdmcreds show options 模块选项 auxiliary/scanner/http/novellmdmcreds: Name Current Setting Required Description Proxies no 使用代理链 RHOSTS yes 目标地址范围或CIDR标识 RPORT 80 yes 默认远程端口...

CVE-2026-73022

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

CVE-2026-70577

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

CVE-2026-69674

Missing authentication for critical function in Windows Modern Device Management MDM allows an authorized attacker to bypass a security feature locally...

CVE-2026-69460

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges over a network...

CVE-2026-69377

Missing authorization in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

EUVD-2026-73763

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

CVE-2026-73022

CVE-2026-73022 is a use-after-free vulnerability in Windows Modern Device Management (MDM) that allows an authorized attacker to escalate privileges locally . The CVSS 3.1 score is 7.0 (HIGH) with a local attack vector, high complexity, low privileges required, and no user interaction, resulting ...

CVE-2026-73003

CVE-2026-73003 is a Use After Free vulnerability in Windows Modern Device Management (MDM) . An authorized attacker can exploit it to achieve local privilege elevation . The CVSS v3.1 base score is 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting high impact across confident...

EUVD-2026-73762

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

CVE-2026-70577

CVE-2026-70577 is a use-after-free vulnerability in Windows Modern Device Management (MDM) that allows an authorized attacker to achieve local privilege escalation . The flaw is rated CVSS 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a locally exploitable issue with...

CVE-2026-69674

Windows Modern Device Management (MDM) contains a missing authentication vulnerability in a critical function that allows a locally authenticated attacker to bypass a security feature . The CVSS v3.1 score is 5.5 (MEDIUM) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N , indicating a local a...

EUVD-2026-73588

Missing authentication for critical function in Windows Modern Device Management MDM allows an authorized attacker to bypass a security feature locally...

CVE-2026-69460

CVE-2026-69460 is a use-after-free vulnerability in Windows Modern Device Management (MDM) that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that exploitation requires a netw...