M365Pwned

M365Pwned Herramientas de Red Team para la explotación de Microsoft 365 mediante la API de Microsoft Graph. Dos herramientas GUI de WinForms para enumerar, buscar y extraer datos de entornos M365 utilizando tokens OAuth a nivel de aplicación — sin interacción del usuario. Herramienta| Objetivo| Q...

CVE-2025-53770

Divine Absolute - Herramienta de Explotación CVE-2025-53770 Resumen Divine Absolute es una herramienta de explotación Python sofisticada y guiada por un asistente que apunta a CVE-2025-53770 , una vulnerabilidad crítica CVSS 9.8 de ejecución remota de código RCE no autenticada en Microsoft...

cve-2026-26114-poc

CVE-2026-26114 Solo para uso en laboratorio o sistemas autorizados para pruebas. PoC en Python root@kitploit: pip install requests requests-ntlm python poc/cve202626114rce.py ^ --target http://sharepoint.local ^ --username spuser1 ^ --password "Password123!" ^ --domain SP19 ^ --cmd "cmd /c whoami...

CVE-2025-53770

CVE-2025-53770 SharePoint Descripción La deserialización de datos no confiables en Microsoft SharePoint Server local permite que un atacante ejecute código de forma remota y comprometa el sistema. Microsoft está al tanto de la explotación activa y está preparando una actualización integral...

sharepoint-toolshell-cve-2025-53770

SharePoint "ToolShell" RCE Exploit CVE-2025-53770 Overview CVE-2025-53770 is a critical remote code execution RCE vulnerability affecting Microsoft SharePoint Server 2016, 2019, and Subscription Edition on-premises only, not SharePoint Online. Attackers can bypass authentication and achieve full...

GraphStrike

GraphStrike 发布博客：GraphStrike：利用Microsoft Graph API使Beacon流量消失 开发者博客：GraphStrike：攻击性工具开发剖析 简介 GraphStrike 是一套工具套件，使 Cobalt Strike 的 HTTPS Beacon 能够通过 Microsoft Graph API 进行 C2 通信。所有 Beacon 流量将通过攻击者 SharePoint 站点中创建的两个文件传输，并且来自 Beacon 的所有通信将路由至 https://graph.microsoft.com： GraphStrike 包含一个配置器，用于创建通...

CVE-2026-50522

CVE-2026-50522 Microsoft SharePoint CVE-2026-50522 cargas útiles y análisis. Peticiones HTTP...

CVE-2026-69904

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...

CVE-2026-69683

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...

CVE-2026-69636

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...

CVE-2026-69409

Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...

CVE-2026-69282

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2023-29357

Recreación del PoC de SharePoint para CVE-2023-29357 en C con mucha ayuda de ChatGPT. Compilado con .Net versión 4.7.2 en Visual Studio 2017 Usa el administrador de paquetes NuGet para instalar cualquier paquete que falte Reglas Yara para detección a continuación Uso: root@kitploit:...

GC2-sheet

GC2 GC2（Google命令与控制）是一个命令与控制应用程序，允许攻击者使用Google Sheet或Microsoft SharePoint List在目标机器上执行命令，并使用Google Drive或Microsoft SharePoint Document窃取文件。 为什么 该项目旨在提供一种无需特殊设置（如：自定义域名、VPS、CDN等）的命令与控制工具，用于红队活动。 此外，程序仅与Google和Microsoft的域名（如.google.com）交互，以增加网络检测难度。 工作流程 Google Microsoft 功能 命令执行 ：使用Google...

EUVD-2026-73740

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-69465

Microsoft Office SharePoint is affected by a missing authorization flaw that allows an authorized attacker to execute code over a network (remote code execution). The Microsoft CNA rates the severity as CVSS 3.1 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H , meaning exploitatio...

CVE-2026-69904

A server-side request forgery (SSRF) vulnerability in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. The flaw requires user interaction and low privileges (CVSS 3.1: 3.5 – LOW ). CISA's SSVC assessment indicates no known exploitation , the vulner...

EUVD-2026-73724

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...

EUVD-2026-73715

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...

CVE-2026-69636

CVE-2026-69636 is an SQL injection vulnerability in Microsoft Office SharePoint , caused by improper neutralization of special elements used in SQL commands. An authorized attacker with low privileges can exploit it over a network to disclose information , with high confidentiality impact but no ...