EntraGoat

EntraGoat - Un Entorno Entra ID Deliberadamente Vulnerable EntraGoat es una infraestructura de Microsoft Entra ID deliberadamente vulnerable para profesionales de la seguridad. Implemente configuraciones incorrectas de identidad del mundo real y rutas de escalada de privilegios en su propio...

EUVD-2026-70798

Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-62916

CVE-2026-62916 is an authentication bypass in Microsoft Entra ID that allows an unauthorized attacker to elevate privileges over a network via an alternate path or channel. The vulnerability is rated CVSS 9.1 (Critical) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N, meaning it is exploitab...

EntraFalcon

EntraFalcon EntraFalcon is a PowerShell-based assessment tool for pentesters, security analysts, and system administrators to evaluate the security posture of a Microsoft Entra ID environment. Designed for ease of use, EntraFalcon runs on PowerShell 5.1 and 7, supports both Windows and Linux, and...

CredSpy

CredSpy Enumera los métodos de autenticación de Microsoft Entra ID para direcciones de correo electrónico usando la API pública GetCredentialType. Este es el mismo endpoint que utiliza la página de inicio de sesión de Microsoft cuando se ingresa un nombre de usuario. A diferencia de la mayoría de...

ConditionalAccessDocumentation

Document Conditional Access with PowerShell This PowerShell script documents your Microsoft Entra Conditional Access policies. The script exports all data as a csv file which can be pretty formatted as excel workbook. To ensure all policies can be retrieved and documented the script uses the...

AzureAD-Attack-Defense

Microsoft Entra ID - Attack and Defense Playbook This publication is a collection of various common attack scenarios on Microsoft Entra and how they can be mitigated or detected. All of the included scenarios, insights and comments are based on experiences from the contributors during their attac...

AzureADEnumeration

Microsoft Entra ID Azure AD Unauthenticated Enumeration Source: EvilMist Toolkit - Invoke-EntraEnum.ps1 - https://github.com/Logisek/EvilMist 1. Tenant Discovery -TenantInfo Discovers tenant information using public APIs. 1.1 azmap.dev API Retrieves tenant details from the azmap.dev service...

Maestro

Maestro Maestro is a post-exploitation tool designed to interact with Intune/EntraID from a C2 agent on a user's workstation without requiring knowledge of the user's password or Azure authentication flows, token manipulation, and web-based administration console. Maestro makes interacting with...

awesome-entra

Awesome Entra A curated list of awesome Microsoft Entra tools, guides, and other resources. Contents Merill's newsletter & podcast Mind Map Learning Hubs Presentations aka.ms Tools Community YouTube Podcast Bluesky Twitter LinkedIn Blogs Merill's newsletter & podcast Entra.News - Weekly round up...

CVE-2026-69836-EXP

CVE-2026-69836 Entra ID Unauthenticated RCE Proof of Concept Overview CVE-2026-69836 is a critical unauthenticated remote code execution vulnerability in Microsoft Entra ID due to improper deserialization of untrusted data CWE-502. The flaw allows attackers to execute arbitrary code over the...

untitledgoosetool

Untitled Goose Tool L'oca è in libertà. Indice Informazioni Per Iniziare Prerequisiti Requisiti Installazione Utilizzo Config GUI Auth Csv Honk Messagetrace Flusso di lavoro predefinito consigliato Flusso di lavoro consigliato per chiamata UAL con limiti di tempo Considerazioni Problemi noti...

EUVD-2026-63693

Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network...

Microsoft Entra ID Deserialization of Untrusted Data Vulnerability

Microsoft Entra ID formerly known as Azure Active Directory contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a network...

CVE-2026-69836

Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network...

CVE-2026-69836 Microsoft Entra ID Remote Code Execution Vulnerability

...

CVE-2026-69836 Microsoft Entra ID Remote Code Execution Vulnerability

...

CVE-2026-69851 Microsoft Entra ID Elevation of Privilege Vulnerability

...

CVE-2026-69851 Microsoft Entra ID Elevation of Privilege Vulnerability

...

CVE-2026-69836

CVE-2026-69836 is a CVSS 10.0 (Critical) deserialization of untrusted data vulnerability in Microsoft Entra ID (formerly Azure Active Directory), enabling an unauthorized attacker to achieve remote code execution over a network with no privileges or user interaction required. The vulnerability wa...