CompassSecurity/EntraFalcon

A Post-exploitation Toolset for Interacting with the Microsoft Graph API

Monkey365 is an open-source security assessment tool for Microsoft 365, Azure, and Microsoft Entra ID. It helps security professionals identify misconfigurations, review cloud security posture, and evaluate environments against industry security best practices and compliance standards.

Initial Access and Post-Exploitation Tool for Entra ID and M365 with a browser-based GUI

A deliberately vulnerable Microsoft Entra ID environment. Learn identity security through hands-on, realistic attack challenges.

A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID

😎 Awesome list of all things related to Microsoft Entra

AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses

A collection of Azure AD/Entra tools for offensive and defensive security purposes

Automation to assess the state of your M365 tenant against CISA's baselines