logo

Introducing Team Foundation Server decryption tool

ID: f198b138-cbfd-5db6-8b06-2d0cfdcd94f1

STIX ID: report--f198b138-cbfd-5db6-8b06-2d0cfdcd94f1

Feed Name: Fox-IT blog

Threat Score
50/100

Date Published: 2018-05-17

Date Updated: 2026-04-27

...
...

This report explains that encrypted variables in Microsoft Team Foundation Server (TFS) can be decrypted if an actor has sufficient access to the TFS database; it references a technical blog post and provides links to a Fox-IT PowerShell script and a Metasploit post module that automate extraction of stored secrets.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.