oauthseeker

OAuthSeeker OAuthSeeker è uno strumento red team per eseguire attacchi di phishing tramite applicazioni OAuth maligne al fine di compromettere le identità degli utenti all'interno di Microsoft Azure e Office365. 🚀 Caratteristiche principali OAuthSeeker fornisce le seguenti caratteristiche...

GO-2026-6259 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-gcp-fips, velero-plugin-for-gcp, velero-plugin-for-microsoft-azure-fips, velero-plugin-for-microsoft-azure, velero-plugin-for-aws, velero-plugin-for-aws-fips...

GO-2026-6259 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-aws, velero-plugin-for-microsoft-azure...

AzureHound

AzureHound Il raccoglitore di dati BloodHound per Microsoft Azure Scarica AzureHound Binari delle release Scarica il binario appropriato per la tua piattaforma da una delle nostre Releases. Rolling Release La rolling release contiene binari precompilati che vengono mantenuti automaticamente...

cloudsploit

CloudSploit by Aqua - Cloud Security Scans Quick Start Generic root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker buil...

offensive-azure

Conjunto de ferramentas ofensivas direcionadas ao Microsoft Azure escritas em Python para serem independentes de plataforma. A lista atual de ferramentas pode ser encontrada abaixo com uma breve descrição de suas funcionalidades. ./DeviceCode/devicecodeeasymode.py Gera um código a ser inserido pe...

offensive-azure

Collection of offensive tools targeting Microsoft Azure written in Python to be platform agnostic. The current list of tools can be found below with a brief description of their functionality. ./DeviceCode/devicecodeeasymode.py Generates a code to be entered by the target user Can be used for...

AzureADAssessment

Microsoft Azure AD Assessment Guida per il valutatore Se sei un dipendente Microsoft o un partner che esegue la valutazione per un cliente, consulta il Wiki per la Guida alla valutazione. Installazione dalla PowerShell Gallery Se riscontri errori, consulta la sezione FAQ alla fine di questo...

CVE-2026-32637 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-aws, velero-plugin-for-microsoft-azure...

GHSA-J2G6-362Q-6QC6 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-aws, velero-plugin-for-microsoft-azure...

CVE-2026-69400 Azure Logic Apps Elevation of Privilege Vulnerability

...

CVE-2026-68782 Azure SQL Database Elevation of Privilege Vulnerability

...

CVE-2026-66309 Azure SQL Database Elevation of Privilege Vulnerability

...

KLA91236 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability...

CVE-2026-71331

Integer overflow or wraparound in Windows Device Health Attestation DHA allows an unauthorized attacker to execute code over a network...

EUVD-2026-56771

Integer overflow or wraparound in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network...

CVE-2026-63522

Azure SQL Database is the affected product for CVE-2026-63522, described as an incorrect permission assignment for a critical resource that allows an authorized attacker to elevate privileges locally. The issue has a base CVSSv3.1 score of 7.8 (HIGH) with LOCAL access, low attack complexity, and ...

EUVD-2026-56746

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network...

Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows Device Health Attestation DHA allows an unauthorized attacker to execute code over a network...

Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Health Attestation DHA allows an unauthorized attacker to execute code over a network...