GDir-Thief

GDir-Thief Инструмент Red Team для эксфильтрации каталога людей Google Google People Directory целевой организации, к которому у вас есть доступ, через Google People API. КАК ЭТО ИСПОЛЬЗОВАТЬ Создание нового проекта Google Cloud Platform GCP Шаги для получения токена доступа Google API,...

Cartero

Cartero Cartero is now a Go CLI with an embedded, no-configuration workspace database instead of the old MongoDB-dependent runtime. The current implementation provides: a polished terminal experience powered by Cobra and Lip Gloss a local admin web UI and safe testing pages via cartero serve...

VMware-CVE-2022-22954

VMware CVE-2022-22954 Workspace ONE Access Freemarker Внедрение шаблонов на стороне сервера POC для Vmware CVE-2022-22954 Используйте этот однострочный GET-запрос!! Он выполнит cat /etc/passwd...

CVE-2022-22954

CVE-2022-22954 PoC VMware Workspace ONE Access и Identity Manager RCE через SSTI. CVE-2022-22954 - PoC SSTI Использование: root@kitploit: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan ...

SlackPirate

SlackPirate - Outil d'énumération et d'extraction Slack Ceci est un outil développé en Python qui utilise les API Slack natives pour extraire des informations 'intéressantes' d'un espace de travail Slack à partir d'un token d'accès. Depuis mai 2018, Slack compte plus de 8 millions de clients et c...

VMWare_CVE-2022-22954

VMWareCVE-2022-22954 CVE-2022-22954 est une vulnérabilité d'injection de template côté serveur dans VMware Workspace ONE Access et Identity Manager Résultat de recherche Shodan PoC Suivez Youtube Twitter...

CVE-2022-22954-PoC

CVE-2022-22954 PoC VMware Workspace ONE Access и Identity Manager RCE через SSTI. CVE-2022-22954 - PoC SSTI Использование: root@kitploit: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan ...

CVE-2022-22954

CVE-2022-22954 Описание уязвимости Workspace ONE Access предоставляет единый портал приложений, через который можно безопасно получить доступ ко всем приложениям предприятия, и может использоваться для единого входа. В CVE-2022-22954 злоумышленник может создать вредоносный запрос, вызывающий...

Dashy <= 4.3.6 - Reflected XSS via Workspace

Dashy versions up to 4.3.6 contain a reflected cross-site scripting vulnerability in the workspace view. The url query parameter is passed directly to an iframe src attribute without scheme validation, allowing an attacker to inject javascript: URIs that execute arbitrary JavaScript in the contex...

CVE-2022-22972

CVE-2022-22972 POC per CVE-2022-22972 che interessa VMware Workspace ONE, vIDM e vRealize Automation 7.6. Analisi tecnica Un'analisi tecnica delle cause profonde della vulnerabilità è disponibile sul nostro blog:...

CVE-2020-13885

Exploit Title: Citrix Workspace app prima della versione 1912 per Windows - Escalation dei privilegi 1 Data: 2020-06-07 Autore: Andrew Hess Link del software: https://www.citrix.com/downloads/workspace-app/legacy-workspace-app-for-windows/workspace-app-for-windows-1911.html/ Bollettino:...

-CVE-2022-22954-scanner

CVE-2022-22954-scanner Einführung in die Schwachstelle VMware Workspace ONE Access früher bekannt als VMware Identity Manager ermöglicht Ihren Mitarbeitern über Multi-Faktor-Authentifizierung, bedingten Zugriff und Single Sign-On einen schnelleren Zugriff auf SaaS-, Web- und native mobile...

CVE-2020-13884

Titolo Exploit: Citrix Workspace app precedente alla 1912 per Windows - Escalation dei privilegi 2 Data: 2020-06-07 Autore: Andrew Hess Link del software: https://www.citrix.com/downloads/workspace-app/legacy-workspace-app-for-windows/workspace-app-for-windows-1911.html/ Bollettino:...

VMWare Workspace ONE UEM - Server-Side Request Forgery

VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5.0.37 contain a server-side request forgery vulnerability. This issue may allow a malicious actor with network access to UEM to send their requests without...

VMware Workspace ONE Access - Authentication Bypass

VMware Workspace ONE Access has two authentication bypass vulnerabilities CVE-2022-22955 & CVE-2022-22956 in the OAuth2 ACS framework. A malicious actor may bypass the authentication mechanism and execute any operation due to exposed endpoints in the authentication framework. id: CVE-2022-22956...

CVE-2021-22054

CVE-2021-22054 Genera payload SSRF Riferimenti https://blog.assetnote.io/2022/04/27/advisory-vmware-workspace-one-uem/ https://blog.assetnote.io/2022/04/27/vmware-workspace-one-uem-ssrf/ Esempi root@kitploit: genera POC python3 ssrf.py --url https://target.com --url https://example.com --airwatch...

Awesome-BEC

Awesome-BEC Repository mit Angriffs- und Verteidigungsinformationen für Untersuchungen zu Business Email Compromise Office365/AzureAD ATT&CK O365 ATT&CK Azure Microsoft Azure Threat Research Matrix Microsoft 365-Lizenzierung Microsoft-Portale Azure-App-IDs Microsoft First-Party-App-IDs &...

CVE-2026-82242

Budibase versions before 3.41.3 contain a missing authorization vulnerability in the POST /api/resources/duplicate endpoint that allows authenticated builders to inject tables, automations, queries, and screens into any other application without holding any role in the destination workspace...

CVE-2026-82233

SiYuan before v3.8.1 contains a path traversal vulnerability in the asset.upload MCP tool that accepts arbitrary absolute file paths without workspace boundary validation. Attackers can induce the AI Agent to upload sensitive files such as SSH keys or credentials from outside the workspace into t...

CVE-2022-22954-Testi

CVE-2022-22954-Testi Test della vulnerabilità CVE-2022-22954 VMware Workspace ONE Access e Identity Manager contengono una vulnerabilità di esecuzione di codice remoto dovuta all'iniezione di template lato server. Un attore malintenzionato con accesso alla rete può attivare un'iniezione di templa...