azuread 开源项目推荐（386 个）

dirkjanm /ROADtools

A collection of Azure AD/Entra tools for offensive and defensive security purposes

Microsoft365DSC /Microsoft365DSC

管理、配置、提取和监视Microsoft 365租户配置

silverhack /monkey365

Monkey365 is an open-source security assessment tool for Microsoft 365, Azure, and Microsoft Entra ID. It helps security professionals identify misconfigurations, review cloud security posture, and evaluate environments against industry security best practices and compliance standards.

tg123 /sshpiper

The missing reverse proxy for ssh scp

microsoft /EntraExporter

PowerShell module to export a local copy of an Entra (Azure AD) tenant configuration.

nyxgeek /o365recon

retrieve information via O365 and AzureAD with a valid cred

vibber-ai /fastapi-azure-auth

Easy and secure implementation of Azure Entra ID (previously AD) for your FastAPI APIs 🔒 B2C, single- and multi-tenant support.

AlteredSecurity /365-Stealer

365-Stealer is a phishing simualtion tool written in python3. It can be used to execute Illicit Consent Grant Attack.

CompassSecurity /EntraFalcon

A lightweight PowerShell tool for assessing the security posture of Microsoft Entra ID environments. It helps identify privileged objects, risky assignments, and potential misconfigurations.

hashicorp /terraform-provider-azuread

Terraform provider for Azure Active Directory

AzureAD /Azure-AD-Incident-Response-PowerShell-Module

The Azure Active Directory Incident Response PowerShell module provides a number of tools, developed by the Azure Active Directory Product Group in conjunction with the Microsoft Detection and Response Team (DART), to assist in compromise response.

vectra-ai-research /MAAD-AF

MAAD 攻击框架——一款用于简单、快速且有效的 M365 和 Entra ID（Azure AD）安全测试的攻击工具。

VikasSukhija /Downloads

AD 健康检查，发送 HTML 邮件，ping 机器，加密密码，批量密码，Microsoft Teams，监控证书过期，监控证书过期，AD属性，IP到主机名，导出AD组，CSV转SQL，关闭，重启，本地管理员，磁盘空间，账户过期，恢复权限，备份权限，删除超过X天的文件，导出DHCP选项，读取注册表，分发组AD属性，监控Windows服务，导出反向DNS，任务监控，监控和提醒，Exchange健康检查，获取网络信息，导出AD属性，AD组成员，Office 365组成员，SQL转CSV，Outlook保存发送附件，上传文件到FTP，Exchange——发送的消息总数，设置仅限Teams模式，Intune复制设备，Intune清理未评估，所有权和权限授予， 写入创建修改注册表，从AD创建组织层级，Azure AD特权身份管理，Intune——导出MAM设备，Intune将设备标记为企业，动态转静态分发组，监控警报，Office 365服务，组成员数量，批量添加外部用户SharePoint，添加到Exchange在线许可组，All in One Office 365 Powershell，批量添加次级邮件， 自动化将邮箱迁移到 o365，添加修改，终止 Exchange 用户，监控统一消息端口，统一消息扩展报告，设置 SharePoint 默认配额，批量联系人创建和转发，上传和下载 sftp 文件，监控 sftp 文件和下载，Office 365 组 写回、CSV 解析器、电子邮件地址更新、修改邮箱地址、MDM 注册、欢迎邮件、Intune 欢迎邮件， 删除消息、删除邮件、SKOB转AD、SKOB到组、PowerApps报告、Powerautomate报告、流程报告、服务器质量保证、服务器检查列表、O365 IP范围、IP范围监控、o365管理员角色、成员提取、CSV转Excel、Skype策略、UPN翻转、房间报告、许可对账、Intune批量设备移除、设备移除、清除Activesync、Lync账户终止、Lync账户移除， 启用Office 365服务，启用o365服务，导出PST，网站收集报告，Office 365组站点，系统管理员，ActiveSync报告，空白，Active Directory属性，Outlook自动化，Intune检测应用，分发列表修复，遗留DN，启动服务，停止服务，禁用服务，消息跟踪，分发列表报告，分发组报告，配额报告，自动回复，离开办公室， robocopy 多会话，主文件夹，本地管理员，数据库，UPN SIP不匹配，可恢复已删除，Teams号码，号码分配，Teams电话，AD组层级，层级成员身份，同步组，Powerapps，Powerapps DLP，AzureAD应用，Azure AD秘密，AzureAD证书，Powerapps DLP，下载SPO文件，下载Sharepoint文件，Sharepoint项目下载

TROUBLE-1 /Vajra

Vajra is a UI-based tool with multiple techniques for attacking and enumerating in the target's Azure and AWS environment. It features an intuitive web-based user interface built with the Python Flask module for a better user experience. The primary focus of this tool is to have different attacking techniques all at one place with web UI interfa…

vectra-ai-research /Halberd

Halberd：多云代理攻击工具

Cloud-Architekt /EntraOps

Community project to classify, identify and protect your privileges based on Enterprise Access Model (EAM)

syncweek-react-aad /react-aad

A React wrapper for Azure AD using the Microsoft Authentication Library (MSAL). The easiest way to integrate AzureAD with your React for authentication.

alexverboon /Hunting-Queries-Detection-Rules

KQL Queries. Microsoft Defender, Microsoft Sentinel

ahaenggli /AzureAD-LDAP-wrapper

LDAP-Wrapper for 'microsoft 365' work or school accounts/users (former 'office 365' - via Entra ID, former AzureAD without AADDS)

soofstad /react-oauth2-pkce

Provider agnostic OAuth2 Authorization Code flow with PKCE for React