absolomb/FindMeAccess

Azure RedOps is a offensive security toolkit for assessing the security posture of Microsoft Entra ID

Monkey365 is an open-source security assessment tool for Microsoft 365, Azure, and Microsoft Entra ID. It helps security professionals identify misconfigurations, review cloud security posture, and evaluate environments against industry security best practices and compliance standards.

Initial Access and Post-Exploitation Tool for Entra ID and M365 with a browser-based GUI

A lightweight PowerShell tool for assessing the security posture of Microsoft Entra ID environments. It helps identify privileged objects, risky assignments, and potential misconfigurations.

A collection of Azure AD/Entra tools for offensive and defensive security purposes

Modular cross-platform Microsoft Graph API (Entra, o365, and Intune) enumeration and exploitation toolkit

TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

AzureADRecon is a tool which gathers information about the Azure Active Directory and generates a report which can provide a holistic picture of the current state of the target environment.

Use Azure AD SSO to log into the AWS via CLI.