164 matches found
ConditionalAccessDocumentation
Document Conditional Access with PowerShell This PowerShell script documents your Microsoft Entra Conditional Access policies. The script exports all data as a csv file which can be pretty formatted as excel workbook. To ensure all policies can be retrieved and documented the script uses the...
EntraFalcon
EntraFalcon EntraFalcon is a PowerShell-based assessment tool for pentesters, security analysts, and system administrators to evaluate the security posture of a Microsoft Entra ID environment. Designed for ease of use, EntraFalcon runs on PowerShell 5.1 and 7, supports both Windows and Linux, and...
CredSpy
CredSpy Enumerate Microsoft Entra ID authentication methods for email addresses using the public GetCredentialType API. This is the same endpoint the Microsoft login page uses when you enter a username. In contrast to most tools using the GetCredentialType method, CredSpy also shows the...
untitledgoosetool
Untitled Goose Tool The Goose is loose. Table of Contents About Getting Started Prerequisites Requirements Installing Usage Config GUI Auth Csv Honk Messagetrace Recommended Default Workflow Recommended Workflow for UAL Call with Time Bounds Considerations Known Issues Acknowledgements Contributi...
EntraGoat
EntraGoat - A Deliberately Vulnerable Entra ID Environment EntraGoat is a deliberately vulnerable Microsoft Entra ID infrastructure for security professionals. Deploy real-world identity misconfigurations and privilege escalation paths in your own tenant, then practice exploiting them in a safe,...
EUVD-2026-70798
Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-62916
Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-62916 Microsoft Entra ID Elevation of Privilege Vulnerability
...
CVE-2026-62916
CVE-2026-62916 is an authentication bypass in Microsoft Entra ID that allows an unauthorized attacker to elevate privileges over a network via an alternate path or channel. The vulnerability is rated CVSS 9.1 (Critical) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N, meaning it is exploitab...
AzureAD-Attack-Defense
Microsoft Entra ID - Attack and Defense Playbook This publication is a collection of various common attack scenarios on Microsoft Entra and how they can be mitigated or detected. All of the included scenarios, insights and comments are based on experiences from the contributors during their attac...
PT-2026-85308
Name of the Vulnerable Software and Affected Versions Microsoft Entra ID affected versions not specified Description An authentication bypass exists that allows an unauthorized attacker to elevate privileges over a network by using an alternate path or channel. Recommendations At the moment, ther...
AzureADEnumeration
Microsoft Entra ID Azure AD Unauthenticated Enumeration Source: EvilMist Toolkit - Invoke-EntraEnum.ps1 - https://github.com/Logisek/EvilMist 1. Tenant Discovery -TenantInfo Discovers tenant information using public APIs. 1.1 azmap.dev API Retrieves tenant details from the azmap.dev service...
Maestro
Maestro Maestro is a post-exploitation tool designed to interact with Intune/EntraID from a C2 agent on a user's workstation without requiring knowledge of the user's password or Azure authentication flows, token manipulation, and web-based administration console. Maestro makes interacting with...
awesome-entra
Awesome Entra A curated list of awesome Microsoft Entra tools, guides, and other resources. Contents Merill's newsletter & podcast Mind Map Learning Hubs Presentations aka.ms Tools Community YouTube Podcast Bluesky Twitter LinkedIn Blogs Merill's newsletter & podcast Entra.News - Weekly round up...
CVE-2026-69836-EXP
Preuve de concept de RCE non authentifiée pour CVE-2026-69836 sur Entra ID Vue d'ensemble CVE-2026-69836 est une vulnérabilité critique d'exécution de code à distance non authentifiée dans Microsoft Entra ID, due à une désérialisation inappropriée de données non fiables CWE-502. Cette faille perm...
EUVD-2026-63693
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network...
Microsoft Entra ID Deserialization of Untrusted Data Vulnerability
Microsoft Entra ID formerly known as Azure Active Directory contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a network...
CVE-2026-69836
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network...
