{"id":21573692,"url":"https://github.com/syss-research/azurenum","last_synced_at":"2025-10-27T07:02:51.716Z","repository":{"id":227432278,"uuid":"769033297","full_name":"SySS-Research/azurenum","owner":"SySS-Research","description":"Enumerate Microsoft Entra ID (Azure AD) fast","archived":false,"fork":false,"pushed_at":"2025-01-08T13:31:31.000Z","size":102,"stargazers_count":91,"open_issues_count":1,"forks_count":9,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-03-30T10:06:46.891Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/SySS-Research.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-03-08T07:53:03.000Z","updated_at":"2025-03-19T12:51:03.000Z","dependencies_parsed_at":"2024-03-13T10:28:46.507Z","dependency_job_id":"68c0c3da-5bf9-45f2-abf2-c0cfbcba9d71","html_url":"https://github.com/SySS-Research/azurenum","commit_stats":null,"previous_names":["syss-research/azurenum"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/SySS-Research%2Fazurenum","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/SySS-Research%2Fazurenum/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/SySS-Research%2Fazurenum/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/SySS-Research%2Fazurenum/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/SySS-Research","download_url":"https://codeload.github.com/SySS-Research/azurenum/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":247478323,"owners_count":20945266,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-24T12:07:44.192Z","updated_at":"2025-10-27T07:02:51.617Z","avatar_url":"https://github.com/SySS-Research.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# AzurEnum\n\n## What is this?\n\nEnumerate some Entra ID (formerly Azure AD) stuff fast, including:\n\n- General information such as number of users, groups, apps, Entra ID license, tenant ID ...\n- General security settings such as group creation, consent policy, guest access ...\n- Administrative Entra ID roles\n- PIM assignments\n- Sync status of administrative users\n- MFA status of administrative users\n- Administrative units\n- Dynamic groups\n- Named locations\n- Conditional access policies\n- Credentials in object attributes\n\nYou can find a quite detailed blog post about the tool here [https://blog.syss.com/posts/introducing-azurenum/](https://blog.syss.com/posts/introducing-azurenum/).\n\n## Requisites\n\n- python3\n- `msal` python library\n- A valid Azure credential set\n\nNot a requisite, but running AzurEnum on Linux is recommended.\n\nThe amount of output of the tool will depend on the privileges of your Azure user and the configuration of the target tenant. Although AzurEnum can run as any user, you will get the most out of it when running with global reader privileges or greater reader access.\n\n## Installation\n\nIn case `msal` is not installed already\n\n```sh\npip3 install msal\n```\n\n## Usage\n\n```sh\n# Get help\npython3 azurenum.py -h\n\n# Run with output logging (text \u0026 json)\npython3 azurenum.py -o out.txt -j out.json\n\n# Run with no colors\npython3 azurenum.py -nc\n\n# Run with custom User-Agent\npython3 azurenum.py -ua \"My-UA\"\n\n# Run with ROPC authentication (username \u0026 password)\npython3 azurenum.py -u myuser@mytenant.com -p mypassword -t xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx\n\n# Read colored txt output (in linux)\nless -r out.txt\n```\n\n## Future work\n\n- JSON output was included as an experimental feature to include machine readable output of findings with an assigned severity. This is however not the main goal of AzurEnum and thus is not mantained as much as the text output. This feature will either get removed or improved later on.\n- Add arguments to set FOCI client to authenticate to and access or refresh token to run with.\n- Enumerate interesting owner relationships\n- Unfold group members in administrative roles and PIM assignments\n- Explicitly mark modifiable groups that have Entra ID roles or PIM assignments\n\n## Credits\n\nEnrique Hernández, SySS GmbH\n\n## License\n\nMIT License","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsyss-research%2Fazurenum","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsyss-research%2Fazurenum","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsyss-research%2Fazurenum/lists"}