offensive-azure 0.45

Collection of tools for attacking Microsoft Cloud products

Collection of offensive tools targeting Microsoft Azure written in Python to be platform agnostic. The current list of tools can be found below with a brief description of their functionality.

• ./Device_Code/device_code_easy_mode.py
  • Generates a code to be entered by the target user
  • Can be used for general token generation or during a phishing/social engineering campaign.
• ./Access_Tokens/token_juggle.py
  • Takes in a refresh token in various ways and retrieves a new refresh token and an access token for the resource specified
• ./Outsider_Recon/outsider_recon.py
  • Takes in a domain and enumerates as much information as possible about the tenant without requiring authentication
• ./User_Enum/user_enum.py
  • Takes in a username or list of usernames and attempts to enumerate valid accounts using one of three methods
  • Can also be used to perform a password spray