covert-control

covert-control Control systems remotely by uploading files to Google Drive, OneDrive, Youtube or Telegram using Python to create the files and the listeners. It allows to create text files, images, audio or videos, with the commands in cleartext or encrypted using AES. covert-googledrive.py -...

CompMgmtLauncher_DLL_UACBypass

CompMgmtLauncher 및 Sharepoint DLL 검색 순서 하이재킹 OneDrive를 통한 UAC/지속성 CompMgmtLauncher.exe는 DLL 검색 순서 하이재킹 취약점에 취약합니다. 이 바이너리는 OneDrive가 설치된 경우 사용자 환경 내에서 Secur32.dll 또는 Wininet.dll DLL을 검색합니다. CompMgmtLauncher.exe는 일부 Windows 10 버전에서 자동 승격auto elevate이 활성화되어 있습니다. 이는 자동 승격이 활성화되어 있고 OneDrive가 Window...

M365Pwned

M365Pwned Microsoft Graph API를 통한 Microsoft 365 공격에 사용되는 Red Team 도구입니다. 애플리케이션 수준 OAuth 토큰을 사용하여 M365 환경의 데이터를 열거, 검색, 외부 유출exfiltration하기 위한 두 개의 WinForms GUI 도구입니다 — 사용자 상호 작용이 필요 없습니다. 도구| 대상| 기능 ---|---|--- MailPwned-GUI.ps1| Exchange Online / Outlook| 사서함 탐색, 메일 검색, 첨부 파일 다운로드,...

o365-attack-toolkit

What is o365-attack-toolkit o365-attack-toolkit allows operators to perform oauth phishing attacks. We decided to move from the old model of static definitions to fully "interactive" with the account in real-time. Some of the changes Interactive E-mail Search - Allows you to search for user e-mai...

KnockKnock

ЭТОТ РЕПОЗИТОРИЙ БЫЛ АРХИВИРОВАН Чтобы просмотреть последнюю версию KnockKnock или отправить issue, обратитесь к https://github.com/waffl3ss/KnockKnock. KnockKnock - v0.9.9 Пожалуйста, убедитесь, что вы действительно используете README. Предназначен для проверки потенциальных имён пользователей...

onedrive_user_enum

onedriveuserenum v2.10 有効なOneDriveユーザーを列挙する 列挙テクニックとOneDrive enumの詳細については、こちらのブログを参照してください: https://www.trustedsec.com/blog/onedrive-to-enum-them-all/ データベースを使用しない旧バージョンのOneDrive Enumをお探しなら、こちらにあります: https://github.com/nyxgeek/simplescanners 2.10の新機能: リモートMySQL DBログオプション -- リモートデータベースにログを記録...

SnaffPoint

SnaffPoint 무엇인가요 SnaffPoint는 이 세상에 약간의 단맛이 필요한 포인트테스터pointester를 위한 도구입니다. 회사또는 고객의 SharePoint Online과 공유 OneDrive 파일에서 민감한 파일을 찾는 데 도움을 줍니다. 어떻게 동작하나요 실제로는 2개의 도구가 있습니다: GetBearerToken은 일반적인 GUI와 MFA 지원을 포함하여 SharePoint에서 인증을 수행합니다 SnaffPoint는 CLI 전용 도구로, 열거 작업을 수행하고 흥미로운 파일을 찾습니다 GetBearerToken...

Microsoft OneDrive for MacOS < 26.095.0519.0003 Elevation of Privilege

The version of Microsoft OneDrive for MacOS installed on the remote macOS host is prior to 26.095.0519.0003. It is, therefore, affected by an elevation of privilege vulnerability: - Improper link resolution before file access 'link following' in Microsoft OneDrive allows an authorized attacker to...

CVE-2026-65680

Improper link resolution before file access 'link following' in Microsoft OneDrive allows an authorized attacker to elevate privileges locally...

CVE-2026-65680

Improper link resolution before file access 'link following' in Microsoft OneDrive allows an authorized attacker to elevate privileges locally...

CVE-2026-65680

CVE-2026-65680 : Microsoft OneDrive for MacOS is affected by an Elevation of Privilege vulnerability. The issue arises from improper link resolution before file access (“link following”), allowing an authorized local attacker to escalate privileges. Affected component is OneDrive for MacOS; root ...

CVE-2026-65680 Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability

...

CVE-2026-65680 Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability

...

EUVD-2026-56826

Improper link resolution before file access 'link following' in Microsoft OneDrive allows an authorized attacker to elevate privileges locally...

Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Microsoft OneDrive allows an authorized attacker to elevate privileges locally...

PT-2026-70821

Improper link resolution before file access 'link following' in Microsoft OneDrive allows an authorized attacker to elevate privileges locally...

CVE-2026-55502

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, POST /api/v4/admin/policy/oauth/signin requires only Admin.Read even though GetOauthRedirectService persists caller-supplied OneDrive secret and appid values, allowing an OAuth token without Admin.Write to modify...

CVE-2026-55502 Cloudreve: OAuth Admin.Read scope can update OneDrive storage policy credentials

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, POST /api/v4/admin/policy/oauth/signin requires only Admin.Read even though GetOauthRedirectService persists caller-supplied OneDrive secret and appid values, allowing an OAuth token without Admin.Write to modify...

CVE-2026-55502

Cloudreve prior to version 4.17.0 contains an OAuth scope bypass in the admin storage policy route POST /api/v4/admin/policy/oauth/signin. The admin route is under RequiredScopes(Admin.Read) and does not apply the local Admin.Write guard used by sibling policy mutation routes, allowing an attacke...

EUVD-2026-51394

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, POST /api/v4/admin/policy/oauth/signin requires only Admin.Read even though GetOauthRedirectService persists caller-supplied OneDrive secret and appid values, allowing an OAuth token without Admin.Write to modify...