AzureGraph is an Azure AD information gathering tool over Microsoft Graph.
Thanks to Microsoft Graph technology, it is possible to obtain all kinds of information from Azure AD, such as users, devices, applications, domains and much more.
This application, allows you to query this data through the API in an easy and simple way through a PowerShell console. Additionally, you can download all the information from the cloud and use it completely offline.
Requirements
- PowerShell 4.0 or higher
Download
It’s recommended to clone the complete repository or download the zip file.
You can do this by running the following command:
git clone https://github.com/JoelGMSec/AzureGraph
Usage
.AzureGraph.ps1 -h
_ ____ _
/ _____ _ _ __ ___ / ___|_ __ __ _ _ __ | |__
/ _ |_ / | | | '__/ _ | _| '__/ _' | '_ | '_
/ ___ / /| |_| | | | __/ |_| | | | (_| | |_) | | | |
/_/ _/___|__,_|_| ___|____|_| __,_| .__/|_| |_|
|_|
-------------------- by @JoelGMSec --------------------
Info: This tool helps you to obtain information from Azure AD
like Users or Devices, using de Microsft Graph REST API
Usage: .AzureGraph.ps1 -h
Show this help, more info on my blog: darkbyte.net
.AzureGraph.ps1
Execute AzureGraph in fully interactive mode
Warning: You need previously generated MS Graph token to use it
You can use a refresh token too, or generate a new one
The detailed guide of use can be found at the following link:
https://darkbyte.net/azuregraph-enumerando-azure-ad-desde-microsoft-graph
License
This project is licensed under the GNU 3.0 license – see the LICENSE file for more details.
Credits and Acknowledgments
This tool has been created and designed from scratch by Joel Gámez Molina // @JoelGMSec
Contact
This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.
For more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.
