Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/dirkjanm/ROADtools
A collection of Azure AD/Entra tools for offensive and defensive security purposes
https://github.com/dirkjanm/ROADtools
azure-active-directory azuread microsoft-graph python
Last synced: about 1 month ago
JSON representation
A collection of Azure AD/Entra tools for offensive and defensive security purposes
- Host: GitHub
- URL: https://github.com/dirkjanm/ROADtools
- Owner: dirkjanm
- License: mit
- Created: 2020-03-28T09:56:08.000Z (over 4 years ago)
- Default Branch: master
- Last Pushed: 2024-07-31T18:44:49.000Z (4 months ago)
- Last Synced: 2024-07-31T18:54:15.587Z (4 months ago)
- Topics: azure-active-directory, azuread, microsoft-graph, python
- Language: Python
- Homepage:
- Size: 1.01 MB
- Stars: 1,759
- Watchers: 42
- Forks: 250
- Open Issues: 9
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
- awesome-entra - ROADrecon - Tool for exploring information in Azure AD from both a Red Team and Blue Team perspective. [](https://badgen.net/github/stars/dirkjanm/ROADtools) (Tools / CLI)
- awesome-cloud-security - 地址
- Awesome-Azure-Pentest - ROADtools - Framework to interact with Azure AD (Tools / Information Gathering)
- awesome-hacking-lists - dirkjanm/ROADtools - A collection of Azure AD/Entra tools for offensive and defensive security purposes (Python)
README
# ROADtools
*(**R**ogue **O**ffice 365 and **A**zure (active) **D**irectory tools)*
ROADtools is a framework to interact with Azure AD. It consists of a library (roadlib) with common components, the ROADrecon Azure AD exploration tool and the ROADtools Token eXchange (roadtx) tool.
## ROADlib
ROADlib is a library that can be used to authenticate with Azure AD or to build tools that integrate with a database containing ROADrecon data. The database model in ROADlib is automatically generated based on the metadata definition of the Azure AD internal API. ROADlib lives in the ROADtools namespace, so to import it in your scripts use `from roadtools.roadlib import X`
## ROADrecon
[](https://dev.azure.com/dirkjanm/ROADtools/_build/latest?definitionId=19&branchName=master)
ROADrecon is a tool for exploring information in Azure AD from both a Red Team and Blue Team perspective. In short, this is what it does:
* Uses an automatically generated metadata model to create an SQLAlchemy backed database on disk.
* Use asynchronous HTTP calls in Python to dump all available information in the Azure AD graph to this database.
* Provide plugins to query this database and output it to a useful format.
* Provide an extensive interface built in Angular that queries the offline database directly for its analysis.
ROADrecon uses `async` Python features and is only compatible with Python 3.7 and newer (development is done with Python 3.8, tests are run with versions up to Python 3.11).
### Installation
There are multiple ways to install ROADrecon:
**Using a published version on PyPi**
Stable versions can be installed with `pip install roadrecon`. This will automatically add the `roadrecon` command to your PATH.
**Using a version from GitHub**
Every commit to master is automatically built into a release version with Azure Pipelines. This ensures that you can install the latest version of the GUI without having to install `npm` and all it's dependencies. You can download the `roadlib` and `roadrecon` build files from the [Azure Pipelines artifacts](https://dev.azure.com/dirkjanm/ROADtools/_build/latest?definitionId=19&branchName=master) (click on the button "1 Published". The build output files are stored in `ROADtools.zip`. You can either install the `.whl` or `.tar.gz` files directly using pip or unzip both and install the folders in the correct order (`roadlib` first):
```
pip install roadlib/
pip install roadrecon/
```
You can also install them in development mode with `pip install -e roadlib/`.
**Developing the front-end**
If you want to make changes to the Angular front-end, you will need to have `node` and `npm` installed. Then install the components from git:
```
git clone https://github.com/dirkjanm/roadtools.git
pip install -e roadlib/
pip install -e roadrecon/
cd roadrecon/frontend/
npm install
```
You can run the Angular frontend with `npm start` or `ng serve` using the Angular CLI from the `roadrecon/frontend/` directory. To build the JavaScript files into ROADrecon's `dist_gui` directory, run `npm run build`.
### Using ROADrecon
See [this Wiki page](https://github.com/dirkjanm/ROADtools/wiki/Getting-started-with-ROADrecon) on how to get started.
## ROADtools Token eXchange (roadtx)
[](https://dev.azure.com/dirkjanm/ROADtools/_build/latest?definitionId=19&branchName=master)
roadtx is a tool for exchanging and using different types of Azure AD issued tokens. It supports many different authentication flows, device registration and PRT related operations. For an overview of the tool, see the [roadtx Wiki](https://github.com/dirkjanm/ROADtools/wiki/ROADtools-Token-eXchange-(roadtx)).
### Installation
There are multiple ways to install roadtx. Note that roadtx requires Python 3.7 or newer.
**Using a published version on PyPi**
Stable versions can be installed with `pip install roadtx`. This will automatically add the `roadtx` command to your PATH.
**Using a version from GitHub**
You can clone this repository and install `roadlib` and then `roadtx` to make sure you have the latest versions of both the tool and the library:
```
pip install roadlib/
pip install roadtx/
```
You can also install them in development mode with `pip install -e roadtx/`.
### Using roadtx
See [the Wiki](https://github.com/dirkjanm/ROADtools/wiki/ROADtools-Token-eXchange-(roadtx)) on how to use roadtx.