mr-un1k0d3r/azureredops

AzureRedOps is a Python command-line toolkit built for security professionals who need to test whether a Microsoft Azure or Entra ID environment is properly secured. Entra ID is Microsoft's cloud-based identity and access management system, previously known as Azure Active Directory. Red teaming, in this context, means actively probing a system for weaknesses in a controlled and authorized way, the way an attacker would, in order to find and fix those gaps before a real threat actor does. The tool works around the concept of activities, each selected with a single flag. Authentication activities let you log in using a username and password directly, trigger a device-code flow that can be used to phish a target's credentials, or drive a real browser session to capture tokens even when multi-factor authentication is in place. Once tokens are obtained, they can be stored locally in a credential file and reused by name, so you do not have to handle raw authentication strings repeatedly. Enumeration activities use Microsoft's Graph API to pull information about users, applications, service principals, and authorization policies within a tenant. A separate bulk collector gathers everything at once. Password spraying activities try a single password against a list of known Microsoft app identifiers to find valid accounts without triggering lockouts from repeated attempts on one account. Post-exploitation activities cover actions an attacker with initial access might take: registering new applications, creating groups, assigning elevated directory roles, inviting external guest users, or uploading files to OneDrive. A recon helper scans for publicly accessible applications that any user could grant consent to, which is a known configuration weakness. The tool requires Python 3.12 or newer and a small set of packages. One activity also requires a Chromium browser installed through Playwright, a browser automation library. The README includes full installation steps, a detailed table of every command-line option, and examples for each major workflow.