zer1t0-aze 0.0.8

Enhance azure cli

AZE (Azure Cli Enhacement)

Extended utilities for azure management.

A python package intended to be used along with Azure Cli to expand its capabilities, even if many commands are completely independent from Azure Cli.

Commands

AZE includes the following commands, many of them require to be authenticated (marked with Auth) in Azure:

• az-brute-add-app-secret: Try to add a secret to all applications (Auth).
• az-brute-passwords: Validate Azure credentials (No auth).
• az-brute-usernames: Validates if a email is Microsoft managed (No auth).
• az-brute-service-subdomains: Check if any Azure service is using the given subdomains (No auth).
• az-brute-blob-containers: Discover public containers in Azure blobs (No auth).
• az-get-login-info: Retrieve login information about an Azure domain (No auth).
• az-get-tenant-domains: Discover the domains associated with a tenant (No auth).
• az-get-tenant-id: Retrieves the tenant id from tenant domain (No auth).
• az-inspect-token: Show access token (jwt) payload in json format (No auth).
• az-list-blobs: List blobs of container from URL (No auth).
• az-list-administrative-unit-members: List Administrative Unit members (Auth).
• az-list-administrative-unit-role-members: List Administrative Unit scoped role members (Auth).
• az-list-role-assignment: List roles without requiring a graph access token. (Auth)
• az-list-sp-app-role-assignment: List App roles for a service principal. (Auth)
• az-list-user-memberof: List membership of user, both groups and administrative units. (Auth)
• az-login-with-token: Injects tokens directly into Azure Cli token cache.
• az-search-token-in-cache: Retrieve items from token cache based on the filters.
• az-show-ad-role: Show Entra ID role. (Auth)
• az-show-administrative-unit: Show Administrative Unit. (Auth)
• az-whoami: Shorcut for "az ad signed-in-user show". (Auth)

Installation

pip install zer1t0-aze

Development

For development, debugging or testing:

cd aze/
pip install -e .

Credits

• AADInternals
• MicroBurst
• MSOLSpray
• o365creeper
• OffensiveCloud