MohammadThabetHassan/TokenAbuse-Azure

Walkthrough of an authorized cloud red-team CTF I solved: OAuth device-code phishing, token theft, Microsoft Graph and SharePoint enumeration, exfiltration. Plus the KQL hunts and Conditional Access policy that catch it.

语言：PowerShell · GitHub 星标：8 · Fork：1

话题：ctf-writeup · device-code-phishing · entra-id · kql · microsoft-sentinel · threat-hunting

在 GitHub 上查看原仓库