<?xml version="1.0" encoding="UTF-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
    <title>entraid</title>
    <link rel="self" type="application/atom+xml" href="https://links.biapy.com/guest/tags/1200/feed"/>
    <updated>2026-10-30T06:34:35+00:00</updated>
    <id>https://links.biapy.com/guest/tags/1200/feed</id>
            <entry>
            <id>https://links.biapy.com/links/14228</id>
            <title type="text"><![CDATA[EntraGoat]]></title>
            <link rel="alternate" href="https://github.com/Semperis/EntraGoat" />
            <link rel="via" type="application/atom+xml" href="https://links.biapy.com/links/14228"/>
            <author>
                <name><![CDATA[Biapy]]></name>
            </author>
            <summary type="text">
                <![CDATA[A deliberately vulnerable Microsoft Entra ID environment. Learn identity security through hands-on, realistic attack challenges.

EntraGoat is a deliberately vulnerable Microsoft Entra ID infrastructure for security professionals. Deploy real-world identity misconfigurations and privilege escalation paths in your own tenant, then practice exploiting them in a safe, black-box CTF format.

Related contents:

- [What Is EntraGoat? A Deliberately Vulnerable Entra ID Simulation Environment @ semperis](https://www.semperis.com/blog/what-is-entragoat-entra-id-simulation-environment/).]]>
            </summary>
            <updated>2026-10-22T11:45:36+00:00</updated>
        </entry>
            <entry>
            <id>https://links.biapy.com/links/14121</id>
            <title type="text"><![CDATA[EntraTrace]]></title>
            <link rel="alternate" href="https://github.com/Bert-JanP/EntraTrace" />
            <link rel="via" type="application/atom+xml" href="https://links.biapy.com/links/14121"/>
            <author>
                <name><![CDATA[Biapy]]></name>
            </author>
            <summary type="text">
                <![CDATA[EntraTrace is a defensive security research tool for tracking and identifying the behavior of offensive tooling targeting Microsoft Entra ID.

The project builds a automatic knowledge base around tools such as AzureHound, AADInternals, O365Enum, PingCastle, and others, with a focus on the UserAgent and API artifacts they generate.]]>
            </summary>
            <updated>2026-10-08T06:17:17+00:00</updated>
        </entry>
            <entry>
            <id>https://links.biapy.com/links/14001</id>
            <title type="text"><![CDATA[ResetSpy]]></title>
            <link rel="alternate" href="https://github.com/mlcsec/ResetSpy" />
            <link rel="via" type="application/atom+xml" href="https://links.biapy.com/links/14001"/>
            <author>
                <name><![CDATA[Biapy]]></name>
            </author>
            <summary type="text">
                <![CDATA[Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal.

Probe Microsoft&amp;#039;s Self-Service Password Reset (SSPR) endpoint to enumerate registeted verification methods and flag any that lack a strong second factor. Provides user enumeration and an approximation of MFA posture across Entra accounts.]]>
            </summary>
            <updated>2026-09-24T07:15:15+00:00</updated>
        </entry>
            <entry>
            <id>https://links.biapy.com/links/12800</id>
            <title type="text"><![CDATA[🧿 Entra CA Insight]]></title>
            <link rel="alternate" href="https://github.com/emiliensocchi/entra-ca-insight" />
            <link rel="via" type="application/atom+xml" href="https://links.biapy.com/links/12800"/>
            <author>
                <name><![CDATA[Biapy]]></name>
            </author>
            <summary type="text">
                <![CDATA[Discover gaps in Entra Conditional Access policies before attackers do.]]>
            </summary>
            <updated>2026-05-21T11:53:24+00:00</updated>
        </entry>
            <entry>
            <id>https://links.biapy.com/links/12735</id>
            <title type="text"><![CDATA[azure-iam-enum]]></title>
            <link rel="alternate" href="https://github.com/ReversecLabs/azure-iam-enum" />
            <link rel="via" type="application/atom+xml" href="https://links.biapy.com/links/12735"/>
            <author>
                <name><![CDATA[Biapy]]></name>
            </author>
            <summary type="text">
                <![CDATA[Enumerate Azure RBAC and Microsoft Entra ID permissions for Entra ID groups, service principals, and users.]]>
            </summary>
            <updated>2026-05-14T21:21:56+00:00</updated>
        </entry>
            <entry>
            <id>https://links.biapy.com/links/11857</id>
            <title type="text"><![CDATA[ROADtools]]></title>
            <link rel="alternate" href="https://github.com/dirkjanm/ROADtools" />
            <link rel="via" type="application/atom+xml" href="https://links.biapy.com/links/11857"/>
            <author>
                <name><![CDATA[Biapy]]></name>
            </author>
            <summary type="text">
                <![CDATA[(Rogue Office 365 and Azure (active) Directory tools)

A collection of Azure AD/Entra tools for offensive and defensive security purposes.

ROADtools is a framework to interact with Azure AD. It consists of a library (roadlib) with common components, the ROADrecon Azure AD exploration tool and the ROADtools Token eXchange (roadtx) tool.

Related contents:

- [STOP THE CAP: Making Entra ID Conditional Access Make Sense Offline @ SpecterOps](https://specterops.io/blog/2026/02/17/stop-the-cap-making-entra-id-conditional-access-make-sense-offline/).]]>
            </summary>
            <updated>2026-02-19T12:38:58+00:00</updated>
        </entry>
            <entry>
            <id>https://links.biapy.com/links/11856</id>
            <title type="text"><![CDATA[CAPSlock]]></title>
            <link rel="alternate" href="https://github.com/rbnroot/CAPSlock" />
            <link rel="via" type="application/atom+xml" href="https://links.biapy.com/links/11856"/>
            <author>
                <name><![CDATA[Biapy]]></name>
            </author>
            <summary type="text">
                <![CDATA[CAPSlock is an offline Conditional Access (CA) analysis tool built on top of a roadrecon database.
It helps defenders, auditors, and red teams understand how Conditional Access policies actually behave, not just how they are configured.

Related contents:

- [STOP THE CAP: Making Entra ID Conditional Access Make Sense Offline @ SpecterOps](https://specterops.io/blog/2026/02/17/stop-the-cap-making-entra-id-conditional-access-make-sense-offline/).]]>
            </summary>
            <updated>2026-02-19T12:38:01+00:00</updated>
        </entry>
            <entry>
            <id>https://links.biapy.com/links/1545</id>
            <title type="text"><![CDATA[AADInternals.com]]></title>
            <link rel="alternate" href="https://aadinternals.com/" />
            <link rel="via" type="application/atom+xml" href="https://links.biapy.com/links/1545"/>
            <author>
                <name><![CDATA[Biapy]]></name>
            </author>
            <summary type="text">
                <![CDATA[AADInternals is PowerShell module for administering Azure AD and Office 365.

- [AADInternals @ GitHub](https://github.com/Gerenios/AADInternals).
- [AADInternals documentation](https://aadinternals.com/aadinternals/).]]>
            </summary>
            <updated>2025-08-28T20:13:26+00:00</updated>
        </entry>
            <entry>
            <id>https://links.biapy.com/links/4476</id>
            <title type="text"><![CDATA[Azure Active Directory Auditing Tool]]></title>
            <link rel="alternate" href="https://admindroid.com/microsoft-365-azure-ad-auditing" />
            <link rel="via" type="application/atom+xml" href="https://links.biapy.com/links/4476"/>
            <author>
                <name><![CDATA[Biapy]]></name>
            </author>
            <summary type="text">
                <![CDATA[AdminDroid Microsoft 365 auditing tool come up with immense reports on all the Microsoft 365 audit activities in the audit log search. Providing in-depth details on user sign-in activities is a head start for admins to analyze the users&amp;#039; sign-in data. With this Azure AD auditing tool, admins can monitor user logins, user activities, group activities, application activities, etc. Jazz up your Microsoft 365 Azure auditing without playing hard with PowerShell cmdlet like &amp;#039;Search-UnifiedAuditLog&amp;#039;.]]>
            </summary>
            <updated>2025-08-29T04:22:38+00:00</updated>
        </entry>
            <entry>
            <id>https://links.biapy.com/links/4789</id>
            <title type="text"><![CDATA[MAAD Attack Framework]]></title>
            <link rel="alternate" href="https://github.com/vectra-ai-research/MAAD-AF" />
            <link rel="via" type="application/atom+xml" href="https://links.biapy.com/links/4789"/>
            <author>
                <name><![CDATA[Biapy]]></name>
            </author>
            <summary type="text">
                <![CDATA[An attack tool for simple, fast &amp;amp; effective security testing of M365 &amp;amp; Azure AD. 

MAAD-AF is designed to make cloud security testing simple, fast and effective. Through its virtually no-setup requirement and easy to use interactive attack modules, security teams can test their security controls, detection and response capabilities easily and swiftly.]]>
            </summary>
            <updated>2025-08-29T05:15:03+00:00</updated>
        </entry>
            <entry>
            <id>https://links.biapy.com/links/5603</id>
            <title type="text"><![CDATA[Untitled Goose Tool]]></title>
            <link rel="alternate" href="https://github.com/cisagov/untitledgoosetool" />
            <link rel="via" type="application/atom+xml" href="https://links.biapy.com/links/5603"/>
            <author>
                <name><![CDATA[Biapy]]></name>
            </author>
            <summary type="text">
                <![CDATA[Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments. Untitled Goose Tool gathers additional telemetry from Microsoft Defender for Endpoint (MDE) and Defender for Internet of Things (IoT) (D4IoT).]]>
            </summary>
            <updated>2025-08-29T07:32:09+00:00</updated>
        </entry>
    </feed>
