BTPS-SecPack

The Blue Team PowerShell Security Package Using Microsoft Teams for Alerts Instead of Email If you wish to use Microsoft Teams for sending alerts instead of using email you will want to load the microsoft-teams branch for this repository which has the Teams alert modifications. It will take me a...

MSTeams---Vulnerability---Remediation

🛡️ Remediation of CVE-2025-53783: Microsoft Teams RCE 📝 Project Overview This project demonstrates a Vulnerability Management Workflow. Using an Azure VM, I identified a high-severity "Remote Code Execution" RCE flaw in Microsoft Teams, verified its existence through PowerShell, and deployed a...

WhatTheHack

What The Hack - Repo Welcome to the What The Hack repo on GitHub. This repo contains Coach content designed for people planning to host a What The Hack event with students in an organization. If you are an organization that is interested in attending or hosting a What The Hack event, please visit...

TeamsUserEnum

UserEnumTeams Description Sometimes user enumeration could be sometimes useful during the reconnaissance of an assessment. This tool will determine if an email is registered on teams or not. More details on the immunIT's blog Usage root@kitploit: .\UserEnumTeams userenum --help Users can be...

teams_dump

在最新版 Microsoft Teams 中导出和解密 Cookie 的 PoC extract.py 不传参直接导出 extract.exe 只是将 extract.py 打包成 exe teamsdump.py 列出数据库中的值 root@kitploit: python.exe .\teamsdump.py teams --list Table: meta Columns in meta: key, value -------------------------------------------------- Table: cookies Columns in cookies:...

teams_dump

PoC for dumping and decrypting cookies in the latest version of Microsoft Teams extract.py just dumps without arguments extract.exe is just extract.py packed into an exe teamsdump.py List values in the database root@kitploit: python.exe .\teamsdump.py teams --list Table: meta Columns in meta: key...

TeamsImplant

TeamsImplant This project is a stealthy teams implant that proxies the urlmon.dll that teams uses compile and throw this bad boy in the teams directory as urlmon.dll and you got yourself a persistence backdoor whenever teams runs by a user or at startup. Features: Mutex so you don't get spammed...

Teamsniper

Teamsniper Teamsniper è uno strumento per recuperare parole chiave in Microsoft Teams come password, email, database, ecc.. Utilizzo Opzioni di Aiuto root@kitploit: usage: Teamsniper.py -h -d DATABASE -a AUTHTOKEN -s SEARCH Teamsniper is a tool for fetching the given keywords in Microsoft Teams...

TeamsNTLMLeak

Descrizione Quando un utente naviga verso una scheda "Sito Web" che rimanda a una pagina web appositamente progettata, può verificarsi l'esposizione dell'hash NTLM tramite l'attivazione di uno schema URL di Office, riducendo il processo a un percorso di leak con un solo clic. Se si tenta di aprir...

KnockKnock

DIESES REPOSITORY WURDE ARCHIVIERT Um die neueste Version von KnockKnock anzuzeigen oder ein Issue zu melden, siehe https://github.com/waffl3ss/KnockKnock. KnockKnock - v0.9.9 Bitte lesen Sie die README gründlich durch. Entwickelt, um potenzielle Benutzernamen zu validieren, indem OneDrive und/od...

CVE-2026-72846

Lightdash stores the webhook URL supplied with a scheduled delivery and later posts to it from sendWebhook in packages/backend/src/clients/GoogleChat/GoogleChatClient.ts and in packages/backend/src/clients/MicrosoftTeams/MicrosoftTeamsClient.ts. In affected versions both call fetch on the stored...

CVE-2026-72846 Lightdash Scheduled Delivery Webhook URLs Are Not Validated, Allowing Server-Side Request Forgery

Lightdash stores the webhook URL supplied with a scheduled delivery and later posts to it from sendWebhook in packages/backend/src/clients/GoogleChat/GoogleChatClient.ts and in packages/backend/src/clients/MicrosoftTeams/MicrosoftTeamsClient.ts. In affected versions both call fetch on the stored...

CVE-2026-65768

Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network...

CVE-2026-65769

Exposure of sensitive information to an unauthorized actor in Microsoft Teams Mobile allows an unauthorized attacker to disclose information over a network...

CVE-2026-65767

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network...

CVE-2026-65767

Microsoft Teams for Android is affected by CVE-2026-65767 due to improper neutralization of input during web page generation (XSS). Attack requires network access with low privileges and no user interaction; an authorized attacker could spoof content. The CVSS v3.1 base score is 8.8 (HIGH). Affec...

CVE-2026-65767 Microsoft Teams for Android Spoofing Vulnerability

...

EUVD-2026-56774

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network...

CVE-2026-65767 Microsoft Teams for Android Spoofing Vulnerability

...

CVE-2026-65769

CVE-2026-65769 affects Microsoft Teams Mobile (iOS). It is described as an information disclosure vulnerability where an unauthenticated network attacker could access sensitive data disclosed by the app. The available sources (NVD/MSRC) confirm exposure over a network but do not provide detailed ...