1059 matches found
offensive-azure
Collection of offensive tools targeting Microsoft Azure written in Python to be platform agnostic. The current list of tools can be found below with a brief description of their functionality. ./DeviceCode/devicecodeeasymode.py Generates a code to be entered by the target user Can be used for...
offensive-azure
Microsoft Azure を標的とした攻撃用ツール集。Python で書かれており、プラットフォームに依存しません。現在のツール一覧とその機能の簡単な説明を以下に示します。 ./DeviceCode/devicecodeeasymode.py ターゲットユーザーに入力させるコードを生成します。 一般的なトークン生成や、フィッシング・ソーシャルエンジニアリングキャンペーンで使用できます。 ./AccessTokens/tokenjuggle.py 様々な方法でリフレッシュトークンを受け取り、指定されたリソースの新しいリフレッシュトークンとアクセストークンを取得します。...
AzureHound
AzureHound Microsoft Azure용 BloodHound 데이터 수집기 AzureHound 받기 릴리스 바이너리 우리의 Releases에서 플랫폼에 맞는 바이너리를 다운로드하세요. 롤링 릴리스 롤링 릴리스에는 main 브랜치와 자동으로 최신 상태로 유지되는 사전 빌드된 바이너리가 포함되어 있으며 여기에서 다운로드할 수 있습니다. 경고: 롤링 릴리스는 불안정할 수 있습니다. 컴파일 사전 요구 사항 Go 1.25 이상 소스에서 이 프로젝트를 빌드하려면 다음을 실행하세요: root@kitploit: go build...
cloudsploit
CloudSploit by Aqua - Cloud Security Scans Quick Start Generic root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker buil...
oauthseeker
OAuthSeeker OAuthSeeker は、Microsoft Azure および Office365 内でのユーザー ID を侵害するために、悪意のある OAuth アプリケーションを使用してフィッシング攻撃を実行するレッドチームツールです。 🚀 主な機能 OAuthSeeker には以下の主要な機能があります: Azure アプリ OAuth フィッシング: Microsoft Azure および Office365 ユーザーを標的とした OAuth フィッシング攻撃を実行し、Microsoft Graph API および Microsoft Azure...
Vulnerabilities in Microsoft Azure
Microsoft has identified 4 vulnerabilities in various Azure components. A malicious individual could exploit these vulnerabilities to carry out attacks that can lead to various types of damage, as mentioned in the table below. The vulnerability with identifier CVE-2026-69854 has a CVSS score of...
AzureADAssessment
Microsoft Azure AD アセスメント アセスメント実施者向けガイド Microsoft の従業員またはパートナーがお客様向けにアセスメントを実施する場合は、Wiki のアセスメント ガイドをご覧ください。 PowerShell ギャラリーからインストールする エラーが発生した場合は、このドキュメントの最後にあるFAQ セクションを参照してください。 root@kitploit: Install-Module AzureADAssessment -Force -Scope CurrentUser If you have already installed the module...
CVE-2026-83948
Improper neutralization of special elements used in a command 'command injection' in Microsoft Azure CLI allows an authorized attacker to execute code over a network...
CVE-2026-83948
Improper neutralization of special elements used in a command 'command injection' in Microsoft Azure CLI allows an authorized attacker to execute code over a network...
EUVD-2026-73888
Improper neutralization of special elements used in a command 'command injection' in Microsoft Azure CLI allows an authorized attacker to execute code over a network...
KLA91263 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of...
CVE-2026-83711 Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
...
CVE-2026-70352
Azure AI Language is affected by a missing authentication vulnerability in a critical function, allowing an unauthorized attacker to elevate privileges over a network . The vulnerability is rated CVSS 10.0 (CRITICAL) with low complexity, no privileges required, no user interaction, and changed sc...
CVE-2026-70352 Azure AI Language Elevation of Privilege Vulnerability
...
KLA91257 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability i...
GO-2026-6259 vulnerabilities
Vulnerabilities for packages: velero-plugin-for-gcp, velero-plugin-for-aws-fips, velero-plugin-for-gcp-fips, velero-plugin-for-microsoft-azure-fips, velero-plugin-for-aws, velero-plugin-for-microsoft-azure...
GO-2026-6259 vulnerabilities
Vulnerabilities for packages: velero-plugin-for-microsoft-azure, velero-plugin-for-aws...
CVE-2026-32637 vulnerabilities
Vulnerabilities for packages: velero-plugin-for-microsoft-azure, velero-plugin-for-aws...