674 matches found
OutOfTune
OutOfTune 受原始 Pytune 启发，OutOfTune 在 Entra ID 中注册一个恶意设备，将其注册到 Intune MDM，并检查最终的合规状态。 目前仅支持 Windows 设备（这是我的主要目标），未来可能会添加其他平台。 配套博客： https://stra-x.github.io/Re-Engineering-Pytune-Rogue-devices-in-the-age-of-conditional-access/...
aftermath
About Aftermath is a Swift-based, open-source incident response framework. Aftermath can be leveraged by defenders in order to collect and subsequently analyze the data from the compromised host. Aftermath can be deployed from an MDM ideally, but it can also run independently from the infected...
aftermath
概要 Aftermathは、Swiftベースのオープンソースインシデントレスポンスフレームワークです。 Aftermathは、防御側が侵害されたホストからデータを収集し、その後分析するために活用できます。AftermathはMDMから展開するのが理想的ですが、感染したユーザーのコマンドラインから独立して実行することも可能です。 Aftermathは最初に一連のモジュールを実行して収集を行います。出力は、-o または --output オプションで指定した場所に書き込まれるか、デフォルトでは /tmp ディレクトリに書き込まれます。...
WindowsMDM-LPE-0Day
WindowsMDM-LPE-0Day 在 Windows 11 上效果最佳 CVE-2021-24084 Windows 本地权限提升漏洞，自2020年以来官方未修复。因此，它仍然是一个零日漏洞。 屏幕截图： YouTube : https://youtu.be/lhT9m68GgL4 受影响的 Windows 版本 Windows 10 1803 Windows 10 1809 Windows 10 1909 Windows 10 2004 Windows 10 20h2 Windows Server 2016 1909 Windows Server 2016 2004 Window...
santa
Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...
CVE-2026-22011-iOS-MDM-Profile-Delivery-over-HTTP
CVE-2026-22011 – iOS MDM 配置文件通过 HTTP 传输 程序代码（Python Flask MDM 服务器） mdmserver.py - Serves enrollment profile over plain HTTP from flask import Flask, sendfile app = Flaskname @app.route'/enroll.mobileconfig' def serveprofile: Vulnerability: profile delivered without HTTPS return...
CVE-2013-1081
此脚本利用了Novell Zenworks移动设备管理中存在的一个本地文件包含（LFI）漏洞。 Metasploit模块 - msf use auxiliary/scanner/http/novellmdmcreds msf auxiliarynovellmdmcreds show options 模块选项 auxiliary/scanner/http/novellmdmcreds: Name Current Setting Required Description Proxies no 使用代理链 RHOSTS yes 目标地址范围或CIDR标识 RPORT 80 yes 默认远程端口...
CVE-2026-103264
Fleet versions before 4.87.0 contain an authentication bypass vulnerability in the device API that accepts hostnames and hardware serials as authentication tokens in addition to device UUIDs. Unauthenticated attackers who know or guess these non-secret identifiers can authenticate as iOS/iPadOS...
CVE-2026-103265
Fleet versions before 4.89.0 fail to properly filter MDM command results by team authorization in the commands/results endpoint. Team-scoped users can read MDM command results for hosts on other teams when a shared command UUID targets hosts across multiple teams, exposing host UUIDs, command...
EUVD-2026-90659
Fleet versions before 4.89.0 fail to properly filter MDM command results by team authorization in the commands/results endpoint. Team-scoped users can read MDM command results for hosts on other teams when a shared command UUID targets hosts across multiple teams, exposing host UUIDs, command...
CVE-2026-103264 Fleet before 4.87.0 Authentication Bypass via Device Identifiers
Fleet versions before 4.87.0 contain an authentication bypass vulnerability in the device API that accepts hostnames and hardware serials as authentication tokens in addition to device UUIDs. Unauthenticated attackers who know or guess these non-secret identifiers can authenticate as iOS/iPadOS...
CVE-2026-103265 Fleet before 4.89.0 Information Disclosure via MDM Command Results
Fleet versions before 4.89.0 fail to properly filter MDM command results by team authorization in the commands/results endpoint. Team-scoped users can read MDM command results for hosts on other teams when a shared command UUID targets hosts across multiple teams, exposing host UUIDs, command...
CVE-2026-103265 Fleet before 4.89.0 Information Disclosure via MDM Command Results
Fleet versions before 4.89.0 fail to properly filter MDM command results by team authorization in the commands/results endpoint. Team-scoped users can read MDM command results for hosts on other teams when a shared command UUID targets hosts across multiple teams, exposing host UUIDs, command...
EUVD-2026-90658
Fleet versions before 4.87.0 contain an authentication bypass vulnerability in the device API that accepts hostnames and hardware serials as authentication tokens in addition to device UUIDs. Unauthenticated attackers who know or guess these non-secret identifiers can authenticate as iOS/iPadOS...
CVE-2026-103264
Fleet versions before 4.87.0 are vulnerable to an authentication bypass in the device API. The root cause is that the API accepts hostnames and hardware serials as authentication tokens alongside device UUIDs. Unauthenticated attackers capable of guessing these non-secret identifiers can authenti...
CVE-2026-103265
Fleet versions before 4.89.0 are vulnerable to an information disclosure flaw in the commands/results endpoint. The root cause is a failure to properly filter MDM command results by team authorization. Consequently, team-scoped users can access MDM command results for hosts belonging to other tea...
macOS-enterprise-privileges v2.6.0
Privileges Transparent, free, and secure admin rights management for macOS. Privileges is a free macOS application designed for modern enterprise environments. It gives users temporary administrator privileges when needed without granting permanent admin rights. The application is built with...
fleet fleet-v4.91.1
News · Report a bug · Docs · Why open source? · Art Open-source platform for IT and security teams with thousands of computers. Designed for APIs, GitOps, webhooks, YAML, and humans. What's it for? Fleet gives you a single system to secure and maintain all your computing devices over the air. You...