Lucene search
+L

29 matches found

Kitploit
Kitploit
added 2026/09/03 6:33 p.m.8 views

M365Pwned

M365Pwned Microsoft Graph API経由でMicrosoft 365を攻略するためのレッドチームツール。 アプリケーションレベルのOAuthトークンを使用してM365環境からデータを列挙・検索・窃取するための2つのWinForms GUIツールです。ユーザー操作は不要です。 Tool| 対象| 機能 ---|---|--- MailPwned-GUI.ps1| Exchange Online / Outlook| メールボックスの閲覧、メールの検索、添付ファイルのダウンロード、なりすましメールの送信 SharePwned-GUI.ps1| SharePoint /...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/03 12:04 p.m.6 views

azureOutlookC2

Azure Outlook C2 基于Azure Outlook的命令与控制工具,利用Microsoft Graph API进行C2通信和数据外泄。 通过Outlook邮箱远程控制被入侵的Windows设备。 创建者:Bobby Cooke @0xBoku & Paul Ungur @C5pider CTI威胁更新(2022年2月13日) Elastic安全实验室发现活跃入侵活动正在野外使用SIESTAGRAPH。SIESTAGRAPH利用Microsoft Graph API通过Outlook和OneDrive进行命令与控制。请查看下方关于Azure Outlook...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/03 7:34 a.m.31 views

reportly

Reportly is an EntraID user activity report tool. About the tool This is a tool that will help blue teams during a cloud incident. When running the tool, the researcher will enter as input a suspicious user and a time frame and will receive a report detailing the following: 1. Information about t...

5.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 7:34 a.m.6 views

reportly

ReportlyはEntraIDユーザーアクティビティレポートツールです。 ツールについて このツールは、クラウドインシデント時にブルーチームを支援するものです。 ツールを実行すると、調査者は疑わしいユーザーと時間枠を入力し、以下の詳細を含むレポートを受け取ります。 1. ユーザーに関する情報 2. ユーザーが実行したアクション 3. ユーザーに対して実行されたアクション 4. ユーザーのログインと失敗ログ 使用方法 ツールを実行すると、認証リンクとデバイスコードが表示されます。リンクに従い、コードを入力して認証してください。 疑わしいユーザーのUser principal...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 8:16 p.m.4 views

GraphStrike

GraphStrike リリースブログ: GraphStrike: Microsoft Graph API を使用して Beacon トラフィックを消失させる 開発者ブログ: GraphStrike: 攻撃的ツール開発の解剖 はじめに GraphStrike は、Cobalt Strike の HTTPS Beacon が C2 通信に Microsoft Graph API を使用できるようにするツールスイートです。すべての Beacon トラフィックは、攻撃者の SharePoint サイトに作成された2つのファイルを介して送信され、Beacon からのすべての通信は...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 7:32 p.m.198 views

o365-attack-toolkit

What is o365-attack-toolkit o365-attack-toolkit allows operators to perform oauth phishing attacks. We decided to move from the old model of static definitions to fully "interactive" with the account in real-time. Some of the changes Interactive E-mail Search - Allows you to search for user e-mai...

5.8AI score
SaveExploits0
The Hacker News
The Hacker News
added 2026/04/22 3:28 p.m.60 views

Harvester Deploys Linux GoGra Backdoor in South Asia Using Microsoft Graph API

The threat actor known as Harvester has been attributed to a new Linux version of its GoGra backdoor deployed as part of attacks likely targeting entities in South Asia. "The malware uses the legitimate Microsoft Graph API and Outlook mailboxes as a covert command-and-control C2 channel, allowing...

5.8AI score
SaveExploits0
Veeam
Veeam
added 2026/03/25 12:00 a.m.98 views

Support Statement — Exchange Web Services (EWS) Deprecation

Challenge Microsoft has announced the deprecation of Exchange Web Services EWS in Exchange Online, with the initial phase-out target of October 1, 2026. Veeam Backup for Microsoft 365 and Veeam Data Cloud for Microsoft 365 currently leverage EWS for Exchange Online backup functionality. Note: Thi...

5.6AI score
SaveExploits0
EUVD
EUVD
added 2025/10/03 8:07 p.m.52 views

EUVD-2024-0260

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00904EPSS
SaveExploits1References6
HackRead
HackRead
added 2025/03/03 2:09 p.m.13 views

New Malware Campaign Exploits Microsoft Graph API to Infect Windows

FortiGuard Labs discovers an advanced attack using modified Havoc Demon and SharePoint. Explore the attack's evasion techniques and security measures...

7.5AI score
SaveExploits0
The Hacker News
The Hacker News
added 2025/02/13 9:11 a.m.16 views

FINALDRAFT Malware Exploits Microsoft Graph API for Espionage on Windows and Linux

Threat hunters have shed light on a new campaign targeting the foreign ministry of an unnamed South American nation with bespoke malware capable of granting remote access to infected hosts. The activity, detected in November 2024, has been attributed by Elastic Security Labs to a threat cluster i...

8.1AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/02/05 10:54 a.m.13 views

CVE-2024-21632

omniauth-microsoftgraph provides an Omniauth strategy for the Microsoft Graph API. Prior to versions 2.0.0, the implementation did not validate the legitimacy of the email attribute of the user nor did it give/document an option to do so, making it susceptible to nOAuth misconfiguration in cases...

9.8CVSS6.5AI score0.00904EPSS
SaveExploits1References1
The Hacker News
The Hacker News
added 2024/08/07 10:41 a.m.46 views

New Go-based Backdoor GoGra Targets South Asian Media Organization

An unnamed media organization in South Asia was targeted in November 20233 using a previously undocumented Go-based backdoor called GoGra. "GoGra is written in Go and uses the Microsoft Graph API to interact with a command-and-control C&C server hosted on Microsoft mail services," Symantec, part ...

7.3AI score
SaveExploits0
The Hacker News
The Hacker News
added 2024/05/03 12:35 p.m.18 views

Hackers Increasingly Abusing Microsoft Graph API for Stealthy Malware Communications

Threat actors have been increasingly weaponizing Microsoft Graph API for malicious purposes with the aim of evading detection. This is done to "facilitate communications with command-and-control C&C infrastructure hosted on Microsoft cloud services," the Symantec Threat Hunter Team, part of...

7.7AI score
SaveExploits0
NVD
NVD
added 2024/01/02 10:15 p.m.65 views

CVE-2024-21632

omniauth-microsoftgraph provides an Omniauth strategy for the Microsoft Graph API. Prior to versions 2.0.0, the implementation did not validate the legitimacy of the email attribute of the user nor did it give/document an option to do so, making it susceptible to nOAuth misconfiguration in cases...

9.8CVSS8.9AI score0.00904EPSS
SaveExploits1References3
Prion
Prion
added 2024/01/02 10:15 p.m.23 views

Information disclosure

omniauth-microsoftgraph provides an Omniauth strategy for the Microsoft Graph API. Prior to versions 2.0.0, the implementation did not validate the legitimacy of the email attribute of the user nor did it give/document an option to do so, making it susceptible to nOAuth misconfiguration in cases...

7.5CVSS6.9AI score0.00904EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2024/01/02 9:54 p.m.4 views

CVE-2024-21632 omniauth-microsoft_graph vulnerable to account takeover (nOAuth)

omniauth-microsoftgraph provides an Omniauth strategy for the Microsoft Graph API. Prior to versions 2.0.0, the implementation did not validate the legitimacy of the email attribute of the user nor did it give/document an option to do so, making it susceptible to nOAuth misconfiguration in cases...

8.6CVSS9AI score0.00904EPSS
SaveExploits1References3
OSV
OSV
added 2024/01/02 9:54 p.m.39 views

CVE-2024-21632 omniauth-microsoft_graph vulnerable to account takeover (nOAuth)

omniauth-microsoftgraph provides an Omniauth strategy for the Microsoft Graph API. Prior to versions 2.0.0, the implementation did not validate the legitimacy of the email attribute of the user nor did it give/document an option to do so, making it susceptible to nOAuth misconfiguration in cases...

8.6CVSS8.9AI score
SaveExploits0References5
Cvelist
Cvelist
added 2024/01/02 9:54 p.m.72 views

CVE-2024-21632 omniauth-microsoft_graph vulnerable to account takeover (nOAuth)

omniauth-microsoftgraph provides an Omniauth strategy for the Microsoft Graph API. Prior to versions 2.0.0, the implementation did not validate the legitimacy of the email attribute of the user nor did it give/document an option to do so, making it susceptible to nOAuth misconfiguration in cases...

8.6CVSS9.6AI score0.00904EPSS
SaveExploits1References3
Microsoft Malware Protection
Microsoft Malware Protection
added 2023/12/05 5:00 p.m.69 views

Microsoft Incident Response lessons on preventing cloud identity compromise

Microsoft observed a surge in cyberattacks targeting identities in 2023, with attempted password-based attacks increasing by more than tenfold in the first quarter of 2023 compared to the same period in 2022. Threat actors leverage compromised identities to achieve a significant level of access t...

7.1AI score
SaveExploits0
Rows per page
Query Builder