BakkerJan

evilginx3

sturdy-chainsaw

M365Portal

Source files and instructions for the M365 Selfservice Portal in PowerApps

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

Power-Automate

scripts

AITMWorker

Proof of concept: using a Cloudflare worker for AITM attacks

awesome-entra

😎 Awesome list of all things related to Microsoft Entra

AzureAD-Attack-Defense

This publication is a collection of various common attack scenarios on Azure Active Directory and how they can be mitigated or detected.

Decks

ROADtools

A collection of Azure AD tools for offensive and defensive security purposes

WHfB-o365-Phishlet

Updated o365 Evilginx phishlet for WHfB

azure-docs

Open source documentation of Microsoft Azure

blogs

cmd

Repository hosting site for cmd.ms

DetectDee

DetectDee: Hunt down social media accounts by username, email or phone across social networks.

fido2-tools-collection

This repository contains a collection of FIDO related resources.

LogicApps

M365

maester

The core repository for the Maester module with helper cmdlets that will be called from the Pester tests.

memdocs

Enable Public Contributions

microsoft-graph-docs

Documentation for the Microsoft Graph REST API

microsoft-graph-docs-contrib

Documentation for the Microsoft Graph REST API

Microsoft-Logic-Apps

Microsoft Logic Apps flows

passkey-authenticator-aaguids

This repo contains a community sourced list of AAGUIDs for passkey authenticators to help with naming in end user management UIs

PowerApps

powerapps-samples

Contains curated community Microsoft Power App samples

SC-300-Identity-and-Access-Administrator

Security-101

7 Lessons, Kick-start Your Cybersecurity Learning.

talks

Sharing presentation slides and workbook templates that can be useful to others to learn more about Azure Active Directory!

Workload-identity-detections

Workload identity detections - Leaked secrets