PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Taking over Azure DevOps Accounts with 1 Click

slcyber.io | research | #cloud | #vulnerability-research | #account-takeover | #microsoft | #oauth | #azure-devops
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

1-click Azure DevOps account takeover via subdomain takeover chained with OAuth redirect token theft.
Published
Collected

Related coverage

research · slcyber.io
More Critical Bugs in Adobe Experience Manager: Pre-Auth RCE
Chaining an unauthenticated bulk import, an in-band XXE, leaked IMS credentials and Groovy execution into full pre-auth RCE on Adobe Experience Manager Cloud.
research · lab.ctbb.show
Azure DevOps Agent Interception
Pivoting from a compromised Windows VM to the cloud by intercepting Azure DevOps Agent traffic
research · osec.io
How we broke exchanges: a deep dive into authentication and client-side bugs
OtterSec details OAuth misconfigurations that lead to account takeover in exchanges, SDKs and wallets, including Google GSI/FedCM flow quirks and desktop-vs-mobile environment gaps.
blog · yeswehack.com
‘I’m not the kind of person to rely on tooling’: Sn0rkY shares his Bug Bounty story and top tips
French hacker Sn0rkY shares his Bug Bounty methodology, views on AI tooling and advice for hunters in this YesWeHack interview.
vulnerability · horizon3.ai
[CVE-2021-38647] OMIGOD – RCE Vulnerability in Multiple Azure Linux Deployments
# OMIGOD – RCE Vulnerability in Multiple Azure Linux Deployments Zach Hanley September 16, 2021 Attack Blogs Overview On September 14, multiple vulnerabilities were discovered by researchers at...
research · slcyber.io
How practical is 100k requests per second? Introducing h3fuzz
Can HTTP/3 really give you 100k requests per second for content discovery? We tested it in a fork of ffuf and are releasing h3fuzz, a web UI for fuzzing.
Back