#AzureAD/EntraID

Enumerates valid Microsoft 365 domains, retrieves tenant name, and checks for MDI instance.

Microsoft Azure AD commands.

Starts tenant recon of the given domain.

Azucar is a multi-threaded plugin-based tool to help you assess the security of your Azure Cloud environment.

Python tool to brute force against an AzureAD SSO endpoint.

AzureAD focused module to gather information.

Enumerate Microsoft Entra ID (Azure AD) fast.

Uses graph theory to reveal the hidden and often unintended relationships within an Active Directory environment.

Python script to enumerate valid Microsoft 365 domains, retrieve tenant name, and check for a Microsoft Defender for Identity (MDI) instance.

Go365 is a tool designed to perform user enumeration* and password guessing attacks on organizations that use Office365 (now/soon Microsoft365).

Enumerate Microsoft 365 Groups in a tenant with their metadata.

A tool to find failure points in Microsoft Multi Factor Authentication configurations from an attacker's perspective but with some extra OPSEC features.

MFASweep is a PowerShell script that attempts to log in to various Microsoft services using a provided set of credentials and will attempt to identify if MFA is enabled.

A PowerShell Toolkit for Attacking Azure.

Omnispray aims to replace tools such as o365spray and provide a modular framework to expand enumeration and spraying beyond just a single target/application.

OneDrive user enumeration - pentest tool to enumerate valid o365 users.

ROADtools is a framework to interact with Azure AD. It currently consists of a library (roadlib) and the ROADrecon Azure AD exploration tool.

Stormspotter creates an 'attack graph' of the resources in an Azure subscription.

PingCastle - Get Active Directory Security at 80% in 20% of the time.

Python3 terminal application that contains 260+ Neo4j cyphers for BloodHound data sets.