GraphRunner - Bypasses Every Product Ever Update..

dafthack / GraphRunner

A Post-exploitation Toolset for Interacting with the Microsoft Graph API

MIT License

933 stars 102 forks source link

Closed rvrsh3ll closed 1 week ago

rvrsh3ll commented 1 week ago

I "hopefully" improved the Device/Browser/UserAgent flow for MFA/CAP bypassing so those options continue during follow-on commands and token refreshes.
Downloads now have a UserAgent.
Also, -Delay and -Jitter were added after some keen defenders boasted detections and hinted at bypasses.

rvrsh3ll commented 1 week ago

Self-signed.