[addtool] Graphpython

[mlcsec]

[link]https://github.com/mlcsec/Graphpython[/link]

[tags]o365,Entra,Intune,Cloud,Red team[/tags]

[short_descr] Modular cross-platform Microsoft Graph API (Entra, o365, and Intune) enumeration and exploitation toolkit[/short_descr]

[long_descr]
Graphpython covers external reconnaissance, authentication and token manipulation, enumeration, and post-exploitation of various Microsoft services, including Entra ID (Azure AD), Office 365 (Outlook, SharePoint, OneDrive, Teams), and Intune (Endpoint Management).

The commands are categorised into the following sections:

• Outsider - external domain reconnaissance and user enumeration
• Authentication - authentication and token manipulation
• Post-Auth Enumeration - Entra/o365 enumeration
• Post-Auth Exploitation - Entra/o365 exploitation
• Post-Auth Intune Enumeration - Intune enumeration
• Post-Auth Intune Exploitation - Intune exploitation
• Cleanup - removing malicious accounts/artifacts
• Locators - identifying unknown objects and permission IDs

[/long_descr]

[image]
https://raw.githubusercontent.com/mlcsec/Graphpython/main/.github/python.png
[/image]

[gwen001]

Issue correctly handled, tool is waiting for human validation.