ADSyncDump-BOF

ADSyncDump BOF The ADSyncDump BOF is a port of Dirkjan Mollema's adconnectdump.py / ADSyncDecrypt into a Beacon Object File BOF for use with Cobalt Strike, Sliver and Havoc. !NOTE The tool has been tested on a Windows Server 2019 with Azure AD Connect version 2.2.1.0. The 32 bit version of the BO...

whiskeysamlandfriends

WhiskeySAML and Friends TicketsPlease TicketsPlease: Python library to assist with the generation of Kerberos tickets, remote retrieval of ADFS configuration settings, generation of Golden SAML tokens, and retrieval of Azure Access Tokens. WhiskeySAML WhiskeySAML: Proof of concept tool for a Gold...

AADInternals

AADInternals AADInternals is PowerShell module for administering Azure AD and Office 365 For details, please visit https://aadinternals.com/aadinternals Installation Run the following PowerShell command to install root@kitploit: Install-Module AADInternals...

MSOLSpray

MSOLSpray A password spraying tool for Microsoft Online accounts Azure/O365. The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled. BE VERY CAREFUL NOT TO LOCKOUT...

AzureADAssessment

Microsoft Azure AD Assessment Assessor Guide If you are a Microsoft employee or partner performing the assessment for a customer please see the Wiki for the Assessment Guide. Install from the PowerShell Gallery If you run into any errors please see the FAQ section at the end of this document...

m365_groups_enum

Enumerate Microsoft 365 Groups in a tenant with their metadata Description The allgroups.py script allows to enumerate all Microsoft 365 Groups in a Azure AD tenant with their metadata: name visibility: public or private description email address owners members Teams enabled? SharePoint URL e.g...

m365_groups_enum

Enumerar grupos de Microsoft 365 en un inquilino con sus metadatos Descripción El script allgroups.py permite enumerar todos los grupos de Microsoft 365 en un inquilino de Azure AD con sus metadatos: nombre visibilidad: público o privado descripción dirección de correo electrónico propietarios...

ROADtools

ROADtools Rogue Office 365 और Azure सक्रिय निर्देशिका उपकरण ROADtools Azure AD के साथ इंटरैक्ट करने के लिए एक फ्रेमवर्क है। इसमें एक लाइब्रेरी roadlib जिसमें सामान्य घटक हैं, ROADrecon Azure AD अन्वेषण उपकरण और ROADtools Token eXchange roadtx उपकरण शामिल हैं। ROADlib ROADlib एक लाइब्रेरी है जिसका...

CRT

CrowdStrike Reporting Tool for Azure CRT This tool queries the following configurations in the Azure AD/O365 tenant which can shed light on hard-to-find permissions and configuration settings in order to assist organizations in securing these environments. Exchange Online O365: Federation...

SSOh-No

SSOh-No This tool is designed to enumerate users, password spray and perform brute force attacks against any organisation that utilises Azure AD or O365. Generally, this endpoint provides extremely verbose errors which can be leveraged to enumerate users and validate their passwords via brute...

offensive-azure

Collection of offensive tools targeting Microsoft Azure written in Python to be platform agnostic. The current list of tools can be found below with a brief description of their functionality. ./DeviceCode/devicecodeeasymode.py Generates a code to be entered by the target user Can be used for...

latma

पार्श्व गति विश्लेषक उपकरण पार्श्व गति विश्लेषक LATMA डोमेन और Azure AD वातावरण से प्रमाणीकरण लॉग एकत्र करता है और संभावित पार्श्व गति हमलों और संदिग्ध गतिविधि की खोज करता है, पार्श्व गति AD वातावरण में या क्लाउड और ऑन-प्रिमाइसेस के बीच हो सकती है। यह उपकरण निष्कर्षों को आरेखों के साथ प्रदर्शित...

AzureGraph

AzureGraph AzureGraph is an Azure AD information gathering tool over Microsoft Graph. Thanks to Microsoft Graph technology, it is possible to obtain all kinds of information from Azure AD, such as users, devices, applications, domains and much more. This application, allows you to query this data...

CVE-2026-59243

CVE-2026-59243 — Apache Airflow FAB Auth Manager JWT signature bypass Korean: README.ko.md Apache advisory: https://lists.apache.org/thread/x4784l7z00tl3gw4tv2dmvoon77rxgpl published 2026-07-29 CVE record: https://vulners.com/cve/CVE-2026-59243 Fixed in: apache-airflow-providers-fab==3.7.3 Class:...

AzureRT

AzureRT Powershell module implementing various cmdlets to interact with Azure and Azure AD from an offensive perspective. Helpful utilities dealing with access token based authentication, switching from Az to AzureAD and az cli interfaces, easy to use pre-made attacks such as Runbook-based comman...

CVE-2023-3128

CVE-2023-3128 यह जाँचने के लिए कि कोई डोमेन CVE-2023-3128 के लिए संवेदनशील है या नहीं, जिसमें Azure AD ईमेल दावा सत्यापन के कारण Grafana में प्रमाणीकरण बाईपास शामिल है, आप निम्नलिखित Python स्क्रिप्ट का उपयोग कर सकते हैं: !/usr/bin/env python3 import requests import argparse def...

PingCastleCloud

Ping Castle Cloud مهم: تم نقل الكود المصدري إلى مشروع PingCastle الرئيسي. هذا المشروع مؤرشف الآن. مقدمة Ping Castle Cloud هي أداة مصممة لتقييم مستوى أمان AzureAD بسرعة باستخدام منهجية تستند إلى تقييم المخاطر وإطار نضج. إنها لا تهدف إلى تقييم مثالي، بل إلى حل وسط يحقق الكفاءة. وهي مستوحاة من مشروع...

Azure-AD-Incident-Response-PowerShell-Module

Azure AD Incident Response PowerShell Module The Azure Active Directory Incident Response PowerShell module provides a number of tools, developed by the Azure Active Directory Product Group in conjunction with the Microsoft Detection and Response Team DART, to assist in compromise response. Why u...

Azure-AD-Password-Checker

Azure AD Password Checker In an Azure AD environment, it's possible to determine whether a user has Multi-Factor Authentication MFA disabled without requiring any special privileges. This can be accomplished by analyzing the account's creation date and last password change date. If an account's...

Awesome-BEC

Awesome-BEC Repository of attack and defensive information for Business Email Compromise investigations Office365/AzureAD ATT&CK O365 ATT&CK Azure Microsoft Azure Threat Research Matrix Microsoft 365 Licensing Microsoft Portals Azure App IDs Microsoft First Party App IDs & Graph Permissions...