@@ -172,6 +172,7 @@ Please refer to the [Wiki](https://github.com/mlcsec/Graphpython/wiki) for more
172
172
- Get-ScriptContent
173
173
- Backdoor-Script
174
174
- Deploy-MaliciousScript
175
+ - Deploy-MaliciousWebLink
175
176
- Display-AVPolicyRules
176
177
- Display-ASRPolicyRules
177
178
- Display-DiskEncryptionPolicyRules
@@ -182,7 +183,6 @@ Please refer to the [Wiki](https://github.com/mlcsec/Graphpython/wiki) for
8000
more
182
183
- Display-UserGroupAccountProtectionPolicyRules
183
184
- Add-ExclusionGroupToPolicy
184
185
- Reboot-Device
185
- - Retire-Device
186
186
- Lock-Device
187
187
- Shutdown-Device
188
188
- Update-DeviceConfig
@@ -195,6 +195,7 @@ Please refer to the [Wiki](https://github.com/mlcsec/Graphpython/wiki) for more
195
195
- Delete-Application
196
196
- Delete-Device
197
197
- Wipe-Device
198
+ - Retire-Device
198
199
199
200
### Locators
200
201
@@ -212,20 +213,25 @@ The following demos can be found on the [Wiki](https://github.com/mlcsec/Graphpy
212
213
- [ Invoke-UserEnumerationAsOutsider] ( https://github.com/mlcsec/Graphpython/wiki/Demos#invoke-userenumerationasoutsider )
213
214
- [ Authentication] ( https://github.com/mlcsec/Graphpython/wiki/Demos#authentication )
214
215
- [ Get-GraphTokens] ( https://github.com/mlcsec/Graphpython/wiki/Demos#get-graphtokens )
216
+ - [ Get-TenantID] ( https://github.com/mlcsec/Graphpython/wiki/Demos#get-tenantid )
215
217
- [ Invoke-RefreshToAzureManagementToken] ( https://github.com/mlcsec/Graphpython/wiki/Demos#invoke-refreshtoazuremanagementtoken )
216
- - [ Invoke-RefreshToMSGraphToken] ( ( https://github.com/mlcsec/Graphpython/wiki/Demos#invoke-refreshtomsgraphtoken) )
218
+ - [ Invoke-RefreshToMSGraphToken] ( https://github.com/mlcsec/Graphpython/wiki/Demos#invoke-refreshtomsgraphtoken )
217
219
- [ Invoke-CertToAccessToken] ( https://github.com/mlcsec/Graphpython/wiki/Demos#invoke-certtoaccesstoken )
218
220
- [ Invoke-ESTSCookieToAccessToken] ( https://github.com/mlcsec/Graphpython/wiki/Demos#invoke-estscookietoaccesstoken )
219
221
- [ Post-Auth Enumeration] ( https://github.com/mlcsec/Graphpython/wiki/Demos#post-auth-enumeration )
222
+ - [ Get-CurrentUser] ( https://github.com/mlcsec/Graphpython/wiki/Demos#get-currentuser )
220
223
- [ Get-User] ( https://github.com/mlcsec/Graphpython/wiki/Demos#get-user )
224
+ - [ Get-Group] ( https://github.com/mlcsec/Graphpython/wiki/Demos#get-group )
221
225
- [ Get-UserPrivileges] ( https://github.com/mlcsec/Graphpython/wiki/Demos#get-userprivileges )
226
+ - [ Get-Domains] ( https://github.com/mlcsec/Graphpython/wiki/Demos#get-domains )
222
227
- [ Get-Application] ( https://github.com/mlcsec/Graphpython/wiki/Demos#get-application )
223
228
- [ List-RecentOneDriveFiles] ( https://github.com/mlcsec/Graphpython/wiki/Demos#list-recentonedrivefiles )
224
229
- [ Post-Auth Exploitation] ( https://github.com/mlcsec/Graphpython/wiki/Demos#post-auth-exploitation )
225
230
- [ Invite-GuestUser] ( https://github.com/mlcsec/Graphpython/wiki/Demos#invite-guestuser )
226
231
- [ Find-PrivilegedRoleUsers] ( https://github.com/mlcsec/Graphpython/wiki/Demos#find-privilegedroleusers )
227
232
- [ Assign-PrivilegedRole] ( https://github.com/mlcsec/Graphpython/wiki/Demos#assign-privilegedrole )
228
233
- [ Find-PrivilegedApplications] ( https://github.com/mlcsec/Graphpython/wiki/Demos#find-privilegedapplications )
234
+ - [ Add-ApplicationCertificate] ( https://github.com/mlcsec/Graphpython/wiki/Demos#add-applicationcertificate )
229
235
- [ Add-ApplicationPermission] ( https://github.com/mlcsec/Graphpython/wiki/Demos#add-applicationpermission )
230
236
- [ Spoof-OWAEmailMessage] ( https://github.com/mlcsec/Graphpython/wiki/Demos#spoof-owaemailmessage )
231
237
- [ Find-DynamicGroups] ( https://github.com/mlcsec/Graphpython/wiki/Demos#find-dynamicgroups )
@@ -234,12 +240,14 @@ The following demos can be found on the [Wiki](https://github.com/mlcsec/Graphpy
234
240
- [ Post-Auth Intune Enumeration] ( https://github.com/mlcsec/Graphpython/wiki/Demos#post-auth-intune-enumeration )
235
241
- [ Get-ManagedDevices] ( https://github.com/mlcsec/Graphpython/wiki/Demos#get-manageddevices )
236
242
- [ Get-UserDevices] ( https://github.com/mlcsec/Graphpython/wiki/Demos#get-userdevices )
243
+ - [ Get-DeviceCompliancePolicies] ( https://github.com/mlcsec/Graphpython/wiki/Demos#get-devicecompliancepolicies )
237
244
- [ Get-DeviceConfigurationPolicies] ( https://github.com/mlcsec/Graphpython/wiki/Demos#get-deviceconfigurationpolicies )
238
245
- [ Post-Auth Intune Exploitation] ( https://github.com/mlcsec/Graphpython/wiki/Demos#post-auth-intune-exploitation )
239
246
- [ Display-AVPolicyRules] ( https://github.com/mlcsec/Graphpython/wiki/Demos#display-avpolicyrules )
240
247
- [ Get-ScriptContent] ( https://github.com/mlcsec/Graphpython/wiki/Demos#get-scriptcontent )
241
248
- [ Backdoor-Script] ( https://github.com/mlcsec/Graphpython/wiki/Demos#backdoor-script )
242
249
- [ Deploy-MaliciousScript] ( https://github.com/mlcsec/Graphpython/wiki/Demos#deploy-maliciousscript )
250
+ - [ Deploy-MaliciousWebLink] ( https://github.com/mlcsec/Graphpython/wiki/Demos#deploy-maliciousweblink )
243
251
- [ Add-ExclusionGroupToPolicy] ( https://github.com/mlcsec/Graphpython/wiki/Demos#add-exclusiongrouptopolicy )
244
252
- [ Cleanup] ( https://github.com/mlcsec/Graphpython/wiki/Demos#cleanup )
245
253
- [ Remove-GroupMember] ( https://github.com/mlcsec/Graphpython/wiki/Demos#remove-groupmember )
@@ -263,8 +271,9 @@ The following demos can be found on the [Wiki](https://github.com/mlcsec/Graphpy
263
271
## Todo
264
272
265
273
- Update:
266
- - [ ] ` Get-UserPrivileges ` - update to flag any privileged directory role app ids
267
- - [ ] ` Locate-DirectoryRoleID ` - similar to other locator functions but for resolving directory role ids
274
+ - [ ] ` Get-UserPrivileges ` - update to flag any privileged directory role app ids green
275
+ - [ ] ` Locate-DirectoryRoleID ` - similar to other locator functions but for resolving directory role ids
276
+ - [ ] ` Deploy-MaliciousWebLink ` - add option to deploy script which copies link new link to all user deskto
4850
ps
268
277
- New:
269
278
- [ ] ` Deploy-MaliciousWin32Exe/MSI ` - use IntuneWinAppUtil.exe to package the EXE/MSI and deploy to devices
270
279
- check also [ here] ( https://learn.microsoft.com/en-us/graph/api/resources/intune-app-conceptual?view=graph-rest-1.0 ) for managing iOS, Android, LOB apps etc. via graph
0 commit comments