Gerenios/AADInternals

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1683 stars · 254 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

AADInternals is a PowerShell module for administering and hacking Entra ID (Azure AD), Office 365, and related endpoints. It includes tools for authentication, enumeration, and exploitation of Microsoft cloud identity services, and is listed in MITRE ATT&CK as S0677.

Use cases

• administer Azure AD and Office 365 from PowerShell
• enumerate Entra ID tenants and users
• test Microsoft 365 identity security posture
• perform red team assessments against Azure AD
• extract and manipulate Azure AD tokens and certificates
• audit Entra ID Connect and AD FS configurations

When to choose

• you need deep, low-level access to Azure AD/Entra ID internals not exposed by official modules
• you are doing offensive security research or red teaming against Microsoft cloud identities
• you want a single PowerShell toolkit covering both administration and attack techniques

When to avoid

• you only need standard day-to-day Microsoft Graph administration
• you require a supported, vendor-backed tool for production change management
• your environment prohibits offensive-security tooling

Facets

library · maturity active

security auth developer-tools cli security cloud-computing developer-tools penetration-testing windows cross-platform cli powershell-module azure-ad entra-id office-365 microsoft-365 red-team mitre-attack

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Gerenios/AADInternals")