119 matches found
reportly
Reportly is an EntraID user activity report tool. About the tool This is a tool that will help blue teams during a cloud incident. When running the tool, the researcher will enter as input a suspicious user and a time frame and will receive a report detailing the following: 1. Information about t...
reportly
Reportly ist ein Tool für Benutzeraktivitätsberichte von EntraID. Über das Tool Dieses Tool hilft Blue Teams während eines Cloud-Vorfalls. Beim Ausführen des Tools gibt der Forscher einen verdächtigen Benutzer und einen Zeitraum ein und erhält einen Bericht mit den folgenden Details: 1...
Azure-AccessPermissions
Azure-AccessPermissions Script PowerShell fácil de usar para enumerar permissões de acesso em um ambiente Azure Active Directory. Detalhes de contexto podem ser encontrados nos posts do blog que acompanham: Desvendando os Principals e Permissões de Acesso do Azure Active Directory Desvendando as...
AzureGraph
AzureGraph AzureGraph é uma ferramenta de coleta de informações do Azure AD através do Microsoft Graph. Graças à tecnologia Microsoft Graph, é possível obter todo tipo de informação do Azure AD, como usuários, dispositivos, aplicativos, domínios e muito mais. Este aplicativo permite consultar ess...
azureOutlookC2
Azure Outlook C2 Azure Outlook Command & Control che utilizza l'API Microsoft Graph per le comunicazioni C2 e l'esfiltrazione dei dati. Controlla da remoto un dispositivo Windows compromesso dalla tua casella di posta Outlook. Creatori: Bobby Cooke @0xBoku e Paul Ungur @C5pider Aggiornamento CTI...
GraphStrike
GraphStrike مدونة الإصدار: GraphStrike: استخدام واجهة برمجة تطبيقات مايكروسوفت جراف لجعل حركة مرور Beacon تختفي مدونة المطور: GraphStrike: تشريح تطوير الأدوات الهجومية مقدمة GraphStrike عبارة عن مجموعة من الأدوات التي تمكن Beacon HTTPS الخاص بـ Cobalt Strike من استخدام واجهة برمجة تطبيقات...
APEX
APEX precedentemente AzurePwn- Framework di Post Exploitation per Azure Un tentativo di semplificare le attività di post-ex una volta ottenuto un qualche tipo di credenziali per un account correlato ad Azure. Ad essere onesti, non è nulla di nuovo o di spettacolare. Solo il mio vecchio culo pigro...
SharePointDumper
SharePointDumper SharePointDumper è un'utilità di estrazione e auditing basata su PowerShell che enumera i siti SharePoint a cui un utente ha accesso tramite Microsoft Graph e scarica i file tramite SharePoint. È progettato per test SOC/DLP, purple teaming e valutazioni red-team non sofisticate, ...
AzureRedOps
AzureRedOps Ein Schweizer Taschenmesser für Azure / Entra ID Red Teaming. Autor: Mr.Un1k0d3r TrueCyber Inc Version: 0.1 Sprache: Python 3.12+ Überblick AzureRedOps ist ein offensives Security-Toolkit zur Bewertung der Sicherheitslage von Microsoft Entra ID- und Azure -Mandanten. Es fasst die...
M365Pwned
M365Pwned Ferramentas de Red Team para exploração do Microsoft 365 via API do Microsoft Graph. Duas ferramentas GUI WinForms para enumerar, pesquisar e exfiltrar dados de ambientes M365 usando tokens OAuth de nível de aplicação — sem necessidade de interação do usuário. Ferramenta| Alvo| O que fa...
o365-attack-toolkit
What is o365-attack-toolkit o365-attack-toolkit allows operators to perform oauth phishing attacks. We decided to move from the old model of static definitions to fully "interactive" with the account in real-time. Some of the changes Interactive E-mail Search - Allows you to search for user e-mai...
offensive-azure
Collection of offensive tools targeting Microsoft Azure written in Python to be platform agnostic. The current list of tools can be found below with a brief description of their functionality. ./DeviceCode/devicecodeeasymode.py Generates a code to be entered by the target user Can be used for...
CVE-2026-49159
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network...
EUVD-2026-48456
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network...
CVE-2026-49159 Microsoft Graph Information Disclosure Vulnerability
...
CVE-2026-49159
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network...
CVE-2026-49159 Microsoft Graph Information Disclosure Vulnerability
...
CVE-2026-49159
Technical details about CVE-2026-49159 are not publicly available in the provided documents. No vendor-specific impact, affected products, or remediation details are included. Monitor for updates from the sources.
