azuread

microsoft/Microsoft365DSC

Manages, configures, extracts and monitors Microsoft 365 tenant configurations

tg123/sshpiper

The missing reverse proxy for ssh scp

silverhack/monkey365

Monkey365 provides a tool for security consultants to easily conduct not only Microsoft 365, but also Azure subscriptions and Microsoft Entra ID security configuration reviews.

nyxgeek/o365recon

retrieve information via O365 and AzureAD with a valid cred

microsoft/EntraExporter

PowerShell module to export a local copy of an Entra (Azure AD) tenant configuration.

hashicorp/terraform-provider-azuread

Terraform provider for Azure Active Directory

AzureAD/Azure-AD-Incident-Response-PowerShell-Module

The Azure Active Directory Incident Response PowerShell module provides a number of tools, developed by the Azure Active Directory Product Group in conjunction with the Microsoft Detection and Response Team (DART), to assist in compromise response.

Intility/fastapi-azure-auth

Easy and secure implementation of Azure Entra ID (previously AD) for your FastAPI APIs 🔒 B2C, single- and multi-tenant support.

AlteredSecurity/365-Stealer

365-Stealer is a phishing simualtion tool written in python3. It can be used to execute Illicit Consent Grant Attack.

TROUBLE-1/Vajra

Vajra is a UI-based tool with multiple techniques for attacking and enumerating in the target's Azure and AWS environment. It features an intuitive web-based user interface built with the Python Flask module for a better user experience. The primary focus of this tool is to have different attacking techniques all at one place with web UI interfaces.

syncweek-react-aad/react-aad

A React wrapper for Azure AD using the Microsoft Authentication Library (MSAL). The easiest way to integrate AzureAD with your React for authentication.

vectra-ai-research/MAAD-AF

MAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).

VikasSukhija/Downloads

AD Health Check, Send HTML Email, Ping machines, Encrypt Password,Bulk Password,Microsoft Teams,Monitor Certificate expiry, Monitor cert expiry, AD attributes, IP to Hostname, Export AD group, CSV to SQL,Shutdown, Restart, Local Admin, Disk Space, Account expiry,Restore Permissions, Backup permissions, Delete Files Older Than X-Days, export DHCP options,Read Registry,Distribution group AD attributes,Monitor Windows Services,Export Reverse DNS,Task Monitor,Monitor and alert, Exchange Health check,Get Network Info, Export AD Attributes,AD group members, Office 365 Group member, SQL to CSV, Outlook save send attachments, Upload files to FTP,Exchange – Total Messages Sent Received, Set Teams Only Mode, Intune Duplicate Device,Intune Cleanup Not Evaluated, Ownership and Grant Permissions, Write Create Modify Registry , Organization Hierarchy from AD,Azure AD Privileged Identity Management,Intune – Export MAM Devices,Intune Marking devices as Corporate, Dynamic to Static Distribution Group,Monitor Alert Office 365 services,Group Member Count,Bulk Addition external users sharepoint, ADD to Exchange online License Group,All in One Office 365 Powershell,Bulk Addition of Secondary Email, Automate move mailboxes to o365, Addition Modification Termination Exchange users, Monitoring Unified Messaging port,Unified Messaging Extensions Report, Set Default Quota for SharePoint,Bulk Contact Creation and Forwarding, Uploading and Downloading files sftp, Monitoring Sftp file and download, Office 365 groups Write back, CSV parser, Email address update, Email address modify, MDM enrollment, Welcome Email, Intune Welcome Email, remove messages, remove email, SKOB to AD, SKOB to group, PowerApps report, Powerautomate Report, Flow report, Server QA, Server Check List, O365 IP range, IP range Monitor, o365 Admin Roles, memberof extraction, CSV to Excel, Skype Policy, UPN Flip, Rooms Report, License Reconciliation,Intune Bulk Device Removal, Device Removal, Clear Activesync, Lync Account Termination,Lync Account Removal, Enable office 365 services, Enable o365 Services, Export PST, Site collection Report, Office 365 Group Sites, System Admin,ActiveSync Report,White Space,Active Directory attributes, outlook automation, Intune Detect App, Distribution list Fix, Legacy DN, start service, stop service, disable service, Message tracking, Distribution lists report,Distribution groups report,Quota Report, Auto reply, out of office, robocopy multi session, Home Folder, local admin, Database, UPN SIP Mismatch, Recoverable deleted, teams number, Number assignment, teams phone, AD Group Hierarchy, Hierarchy membership, Sync Groups, Powerapps, Powerapps DLP, AzureAD application, Azure AD Secret, AzureAD Certificate, AzureAD Cert, Powerapps DLP, Download SPO file, Download Sharepoint file, Sharepoint item download

microsoft/contosotraders-cloudtesting

The Contoso Traders app is a sample application showcasing Playwright, Azure Load Testing, Azure Chaos Studio.

compwiz32/PowerShell

My everyday PS code as well as a collection of scripts I have downloaded for reference

PierreGode/Linux-Active-Directory-join-script

Active directory Join script for Ubuntu, Debian, CentOS, Linux Mint, Fedora, Kali, Elementary OS and Raspbian with built in failchcheck and debugmode for Ubuntu. "The most advanced and updated AD join script on GITHUB for Linux"

ahaenggli/AzureAD-LDAP-wrapper

LDAP-Wrapper for 'microsoft 365' work or school accounts/users (former 'office 365' - via Entra ID, former AzureAD without AADDS)

soofstad/react-oauth2-pkce

Provider agnostic OAuth2 Authorization Code flow with PKCE for React

ddbnl/office365-audit-log-collector

Collect / retrieve Office365, AzureAD and DLP audit logs and output to PRTG, Azure Log Analytics Workspace, SQL, Graylog, Fluentd, and/or file output.

nyxgeek/AzureAD_Autologon_Brute

Brute force attack tool for Azure AD Autologon/Seamless SSO - Source: https://arstechnica.com/information-technology/2021/09/new-azure-active-directory-password-brute-forcing-flaw-has-no-fix/

michelderooij/Connect-Office365Services

Helper functions to connect to Office 365 services or Exchange On-Premises.

wunderwuzzi23/ropci

So, you think you have MFA? AAD/ROPC/MFA bypass testing tool

damienbod/bff-aspnetcore-angular

Backend for frontend security using Angular Standalone (nx) and ASP.NET Core backend

WillOram/AzureAD-incident-response

Notes on responding to security breaches relating to Azure AD

merill/idPowerToys

Repository for idPowerToys an app for Azure Active Directory admins.

JoelGMSec/AzureGraph

Azure AD enumeration over MS Graph

alexverboon/Hunting-Queries-Detection-Rules

KQL Queries. Microsoft 365 Defender, Microsoft Sentinel

damienbod/Blazor.BFF.AzureAD.Template

Blazor.BFF.AzureAD.Template, Blazor WASM hosted in ASP.NET Core using Microsoft Entra ID BFF (server authentication)

Azure-Samples/ms-identity-mobile-apple-swift-objc

An iOS sample in Swift that authenticates Microsoft Account and Azure AD users and calls the Graph API using OAuth 2.0

microsoft/MSCloudLoginAssistant

PowerShell Module Handling Authentication to Cloud Services

Azure-Samples/active-directory-javascript-singlepageapp-dotnet-webapi-v2

A JavaScript based single page app with a .NET backend that authenticates users for AzureAD, Microsoft personal and work accounts, and more, and calls the backend web api using access tokens, without using any Single Page Application framework

kenchan0130/docker-simplesamlphp

Dockerized plug and play SAML 2.0 Identity Provider (IdP) for development and testing.

chadmcox/Azure_Active_Directory

damienbod/AspNetCoreExperiments

ASP.NET Core Blazor BFF with Microsoft Entra ID and Razor page

damienbod/AzureAD-Auth-MyUI-with-MyAPI

Azure AD Auth with ASP.NET CORE UI and ASP.ENT Core API