Semperis/EntraGoat

BadZure automates the deployment of intentionally misconfigured Entra ID tenants and Azure subscriptions, populating them with diverse entities and configurable, traversable attack paths.

A lightweight PowerShell tool for assessing the security posture of Microsoft Entra ID environments. It helps identify privileged objects, risky assignments, and potential misconfigurations.

A Post-exploitation Toolset for Interacting with the Microsoft Graph API

😎 Awesome list of all things related to Microsoft Entra

This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.

Initial Access and Post-Exploitation Tool for Entra ID and M365 with a browser-based GUI

A fork of the great TokenTactics with support for CAE and token endpoint v2

Six Degrees of Domain Admin

AWSGoat : A Damn Vulnerable AWS Infrastructure