You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Please refer to the [Wiki](https://github.com/mlcsec/Graphpython/wiki) for the full user guide and details of available functionality.
83
-
84
-
### Outsider
85
-
86
-
***Invoke-ReconAsOutsider** - Perform outsider recon of the target domain
87
-
***Invoke-UserEnumerationAsOutsider** - Checks whether the user exists within Azure AD
88
-
89
-
### Authentication
90
-
91
-
***Get-GraphTokens** - Obtain graph token via device code phish
92
-
***Get-TenantID** - Get tenant ID for target domain
93
-
***Get-TokenScope** - Get scope of supplied token
94
-
***Decode-AccessToken** - Get all token payload attributes
95
-
***Invoke-RefreshToMSGraphToken** - Convert refresh token to Microsoft Graph token
96
-
***Invoke-RefreshToAzureManagementToken** - Convert refresh token to Azure Management token
97
-
***Invoke-RefreshToVaultToken** - Convert refresh token to Azure Vault token
98
-
***Invoke-RefreshToMSTeamsToken** - Convert refresh token to MS Teams token
99
-
***Invoke-RefreshToOfficeAppsToken** - Convert refresh token to Office Apps token
100
-
***Invoke-RefreshToOfficeManagementToken** - Convert refresh token to Office Management token
101
-
***Invoke-RefreshToOutlookToken** - Convert refresh token to Outlook token
102
-
***Invoke-RefreshToSubstrateToken** - Convert refresh token to Substrate token
103
-
***Invoke-RefreshToYammerToken** - Convert refresh token to Yammer token
104
-
***Invoke-RefreshToIntuneEnrollmentToken** - Convert refresh token to Intune Enrollment token
105
-
***Invoke-RefreshToOneDriveToken** - Convert refresh token to OneDrive token
106
-
***Invoke-RefreshToSharePointToken** - Convert refresh token to SharePoint token
107
-
***Invoke-CertToAccessToken** - Convert Azure Application certificate to JWT access token
108
-
***Invoke-ESTSCookieToAccessToken** - Convert ESTS cookie to MS Graph access token
109
-
***Invoke-AppSecretToAccessToken** - Convert Azure Application secretText credentials to access token
110
-
***New-SignedJWT** - Construct JWT and sign using Key Vault PEM certificate (Azure Key Vault access token required) then generate Azure Management token
111
-
112
-
### Post-Auth Enumeration
113
-
114
-
***Get-CurrentUser** - Get current user profile
115
-
***Get-CurrentUserActivity** - Get recent activity and actions of current user
116
-
***Get-OrgInfo** - Get information relating to the target organization
117
-
***Get-Domains** - Get domain objects
118
-
***Get-User** - Get all users (default) or target user
119
-
***Get-UserProperties** - Get current user properties (default) or target user
120
-
***Get-UserGroupMembership** - Get group memberships for current user (default) or target user
121
-
***Get-UserTransitiveGroupMembership** - Get transitive group memberships for current user (default) or target user
122
-
***Get-Group** - Get all groups (default) or target group
123
-
***Get-GroupMember** - Get all members of target group
124
-
***Get-AppRoleAssignments** - Get application role assignments for current user (default) or target user
125
-
***Get-ConditionalAccessPolicy** - Get conditional access policy properties
126
-
***Get-Application** - Get Enterprise Application details for app (NOT object) ID
127
-
***Get-AppServicePrincipal** - Get details of the application's service principal from the app ID
128
-
***Get-ServicePrincipal** - Get Service Principal details
129
-
***Get-ServicePrincipalAppRoleAssignments** - Get Service Principal app role assignments (shows available admin consent permissions that are already granted)
130
-
***Get-PersonalContacts** - Get contacts of the current user
131
-
***Get-CrossTenantAccessPolicy** - Get cross tenant access policy properties
132
-
***Get-PartnerCrossTenantAccessPolicy** - Get partner cross tenant access policy
133
-
***Get-UserChatMessages** - Get ALL messages from all chats for target user (Chat.Read.All)
134
-
***Get-AdministrativeUnitMember** - Get members of administrative unit
135
-
***Get-OneDriveFiles** - Get all accessible OneDrive files for current user (default) or target user
136
-
***Get-UserPermissionGrants** - Get permissions grants of current user (default) or target user
137
-
***Get-oauth2PermissionGrants** - Get oauth2 permission grants for current user (default) or target user
138
-
***Get-Messages** - Get all messages in signed-in user's mailbox (default) or target user
139
-
***Get-TemporaryAccessPassword** - Get TAP details for current user (default) or target user
140
-
***Get-Password** - Get passwords registered to current user (default) or target user
141
-
***List-AuthMethods** - List authentication methods for current user (default) or target user
142
-
***List-DirectoryRoles** - List all directory roles activated in the tenant
143
-
***List-Notebooks** - List current user notebooks (default) or target user
144
-
***List-ConditionalAccessPolicies** - List conditional access policy objects
145
-
***List-ConditionalAuthenticationContexts** - List conditional access authentication context
146
-
***List-ConditionalNamedLocations** - List conditional access named locations
147
-
***List-SharePointRoot** - List root SharePoint site properties
148
-
***List-SharePointSites** - List any available SharePoint sites
149
-
***List-SharePointURLs** - List SharePoint site web URLs visible to current user
150
-
***List-ExternalConnections** - List external connections
151
-
***List-Applications** - List all Azure Applications
152
-
***List-ServicePrincipals** - List all service principals
153
-
***List-Tenants** - List tenants
154
-
***List-JoinedTeams** - List joined teams for current user (default) or target user
155
-
***List-Chats** - List chats for current user (default) or target user
156
-
***List-ChatMessages** - List messages in target chat
157
-
***List-Devices** - List devices
158
-
***List-AdministrativeUnits** - List administrative units
159
-
***List-OneDrives** - List current user OneDrive (default) or target user
160
-
***List-RecentOneDriveFiles** - List current user recent OneDrive files
161
-
***List-SharedOneDriveFiles** - List OneDrive files shared with the current user
162
-
***List-OneDriveURLs** - List OneDrive web URLs visible to current user
163
-
164
-
### Post-Auth Exploitation
165
-
166
-
***Invoke-CustomQuery** - Custom GET query to target Graph API endpoint
167
-
***Invoke-Search** - Search for string within entity type (driveItem, message, chatMessage, site, event)
168
-
***Find-PrivilegedRoleUsers** - Find users with privileged roles assigned
169
-
***Find-PrivilegedApplications** - Find privileged apps (via their service principal) with granted admin consent API permissions
170
-
***Find-UpdatableGroups** - Find groups which can be updated by the current user
171
-
***Find-SecurityGroups** - Find security groups and group members
172
-
***Find-DynamicGroups** - Find groups with dynamic membership rules
173
-
***Update-UserPassword** - Update the passwordProfile of the target user (NewUserS3cret@Pass!)
174
-
***Update-UserProperties** - Update a specific user property of the target user
175
-
***Add-UserTAP** - Add new Temporary Access Password (TAP) to target user
176
-
***Add-GroupMember** - Add member to target group
177
-
***Add-ApplicationPassword** - Add client secret to target application
178
-
***Add-ApplicationCertificate** - Add client certificate to target application
179
-
***Add-ApplicationPermission** - Add permission to target application e.
F438
g. Mail.Send and attempt to grant admin consent
180
-
***Grant-AppAdminConsent** - Grant admin consent for Graph API permission already assigned to enterprise application
181
-
***Create-Application** - Create new enterprise application with default settings
182
-
***Create-NewUser** - Create new Entra ID user
183
-
***Invite-GuestUser** - Invite guest user to Entra ID
184
-
***Assign-PrivilegedRole** - Assign chosen privileged role to user/group/object
185
-
***Open-OWAMailboxInBrowser** - Open an OWA Office 365 mailbox in BurpSuite's embedded Chromium browser using either a Substrate.Office.com or Outlook.Office.com access token
0 commit comments