{"adoption": {"forks": 128, "observed_at": "2026-08-28T04:03:58.233591+00:00", "stars": 1201}, "canonical_url": "https://ross.abutalabs.com/products/power-pwn", "card": {"archived": false, "artifact_type": "cli-tool", "description": "An offensive/defense security toolset for discovery, recon and ethical assessment of AI Agents", "domain": ["security", "penetration-testing", "artificial-intelligence"], "enriched": true, "function": ["penetration-testing", "security", "osint", "llm-inference", "chatbot"], "health_score": 71, "homepage": "https://zenity.io/zenity-security-assessment-hub", "language": "Python", "license": "MIT", "license_family": "permissive", "maturity": "active", "member_repos": ["mbrg/power-pwn"], "name": "mbrg/power-pwn", "platform": ["cli", "python", "cross-platform"], "pushed_at": "2025-12-21T15:33:00+00:00", "repo": "mbrg/power-pwn", "stars": 1201, "tags": ["red-team", "pentesting", "power-platform", "copilot-studio", "m365", "ai-agents", "recon", "offensive-security", "microsoft-365", "low-code"], "topics": ["pentesting", "redteam", "hacking", "lowcode", "nocode", "m365", "microsoft365", "powerapps", "hacking-tool", "redteaming", "ai-red-team", "copilotstudio", "agentforce", "agentspace", "chatgpt", "agentkit", "gpts", "powerplatform", "blackhat", "defcon"], "urls": [], "use_cases": ["discover misconfigured Copilot Studio bots exposed to unauthenticated users", "enumerate and analyze publicly available custom GPTs", "scan a Power Platform tenant and dump accessible resources", "test Microsoft 365 Copilot for unauthorized data retrieval", "find publicly exposed MCP servers and AI middleware via Shodan", "identify Power Pages misconfigurations leaking Dataverse tables", "simulate phishing campaigns using Power Platform"], "what_it_is": "Power Pwn is an offensive and defensive security toolset for Microsoft 365 Power Platform and AI services, including Copilot Studio, custom GPTs, and M365 Copilot. It provides modules for tenant reconnaissance, data dumping, backdoor deployment, phishing simulation, and discovery of misconfigured or publicly exposed AI agents.", "when_to_avoid": ["you need a defensive governance or DLP product rather than an assessment toolset", "your environment does not use Microsoft 365, Power Platform, or Copilot services", "you require a fully supported commercial product with vendor guarantees"], "when_to_choose": ["you are a red teamer or security researcher assessing Microsoft 365 and Power Platform environments", "you need to audit AI agents like Copilot Studio bots or custom GPTs for exposure and misconfiguration", "you want an open-source toolset covering both Power Platform and enterprise copilot attack surfaces"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/power-pwn", "repo": "mbrg/power-pwn", "role": "main", "score": 63}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:03:58.233591+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T06:20:42.686647+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "2a10143e2c99eb21d4a7283439e44c9c71f1ddbf910cd2281bad36ddf57a0eea", "fetched_at": "2026-08-28T04:03:58.233591+00:00", "kind": "readme", "missing": false, "url": "https://github.com/mbrg/power-pwn"}, {"content_hash": "c49bb87654090d14fd9a6d0ca1f159981fec68877813039d37091a61a719fbb5", "fetched_at": "2026-08-29T12:28:03.503151+00:00", "kind": "homepage", "missing": false, "url": "https://zenity.io/zenity-security-assessment-hub"}, {"content_hash": "90c15ce6d0426f1d49a8c5b6ac02424d351f8f1278c69f3b7b698dff780955f2", "fetched_at": "2026-08-29T12:28:03.512626+00:00", "kind": "site_page", "missing": false, "url": "https://zenity.io/company"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:03:58.233591+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T06:20:42.686647+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "2a10143e2c99eb21d4a7283439e44c9c71f1ddbf910cd2281bad36ddf57a0eea", "fetched_at": "2026-08-28T04:03:58.233591+00:00", "kind": "readme", "missing": false, "url": "https://github.com/mbrg/power-pwn"}, {"content_hash": "c49bb87654090d14fd9a6d0ca1f159981fec68877813039d37091a61a719fbb5", "fetched_at": "2026-08-29T12:28:03.503151+00:00", "kind": "homepage", "missing": false, "url": "https://zenity.io/zenity-security-assessment-hub"}, {"content_hash": "90c15ce6d0426f1d49a8c5b6ac02424d351f8f1278c69f3b7b698dff780955f2", "fetched_at": "2026-08-29T12:28:03.512626+00:00", "kind": "site_page", "missing": false, "url": "https://zenity.io/company"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T06:20:42.686647+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "2a10143e2c99eb21d4a7283439e44c9c71f1ddbf910cd2281bad36ddf57a0eea", "fetched_at": "2026-08-28T04:03:58.233591+00:00", "kind": "readme", "missing": false, "url": "https://github.com/mbrg/power-pwn"}, {"content_hash": "c49bb87654090d14fd9a6d0ca1f159981fec68877813039d37091a61a719fbb5", "fetched_at": "2026-08-29T12:28:03.503151+00:00", "kind": "homepage", "missing": false, "url": "https://zenity.io/zenity-security-assessment-hub"}, {"content_hash": "90c15ce6d0426f1d49a8c5b6ac02424d351f8f1278c69f3b7b698dff780955f2", "fetched_at": "2026-08-29T12:28:03.512626+00:00", "kind": "site_page", "missing": false, "url": "https://zenity.io/company"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:03:58.233591+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:03:58.233591+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:03:58.233591+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T06:20:42.686647+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "2a10143e2c99eb21d4a7283439e44c9c71f1ddbf910cd2281bad36ddf57a0eea", "fetched_at": "2026-08-28T04:03:58.233591+00:00", "kind": "readme", "missing": false, "url": "https://github.com/mbrg/power-pwn"}, {"content_hash": "c49bb87654090d14fd9a6d0ca1f159981fec68877813039d37091a61a719fbb5", "fetched_at": "2026-08-29T12:28:03.503151+00:00", "kind": "homepage", "missing": false, "url": "https://zenity.io/zenity-security-assessment-hub"}, {"content_hash": "90c15ce6d0426f1d49a8c5b6ac02424d351f8f1278c69f3b7b698dff780955f2", "fetched_at": "2026-08-29T12:28:03.512626+00:00", "kind": "site_page", "missing": false, "url": "https://zenity.io/company"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:03:58.233591+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:03:58.233591+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T06:20:42.686647+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "2a10143e2c99eb21d4a7283439e44c9c71f1ddbf910cd2281bad36ddf57a0eea", "fetched_at": "2026-08-28T04:03:58.233591+00:00", "kind": "readme", "missing": false, "url": "https://github.com/mbrg/power-pwn"}, {"content_hash": "c49bb87654090d14fd9a6d0ca1f159981fec68877813039d37091a61a719fbb5", "fetched_at": "2026-08-29T12:28:03.503151+00:00", "kind": "homepage", "missing": false, "url": "https://zenity.io/zenity-security-assessment-hub"}, {"content_hash": "90c15ce6d0426f1d49a8c5b6ac02424d351f8f1278c69f3b7b698dff780955f2", "fetched_at": "2026-08-29T12:28:03.512626+00:00", "kind": "site_page", "missing": false, "url": "https://zenity.io/company"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:03:58.233591+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:03:58.233591+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:03:58.233591+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T06:20:42.686647+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "2a10143e2c99eb21d4a7283439e44c9c71f1ddbf910cd2281bad36ddf57a0eea", "fetched_at": "2026-08-28T04:03:58.233591+00:00", "kind": "readme", "missing": false, "url": "https://github.com/mbrg/power-pwn"}, {"content_hash": "c49bb87654090d14fd9a6d0ca1f159981fec68877813039d37091a61a719fbb5", "fetched_at": "2026-08-29T12:28:03.503151+00:00", "kind": "homepage", "missing": false, "url": "https://zenity.io/zenity-security-assessment-hub"}, {"content_hash": "90c15ce6d0426f1d49a8c5b6ac02424d351f8f1278c69f3b7b698dff780955f2", "fetched_at": "2026-08-29T12:28:03.512626+00:00", "kind": "site_page", "missing": false, "url": "https://zenity.io/company"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:03:58.233591+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:03:58.233591+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T06:20:42.686647+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "2a10143e2c99eb21d4a7283439e44c9c71f1ddbf910cd2281bad36ddf57a0eea", "fetched_at": "2026-08-28T04:03:58.233591+00:00", "kind": "readme", "missing": false, "url": "https://github.com/mbrg/power-pwn"}, {"content_hash": "c49bb87654090d14fd9a6d0ca1f159981fec68877813039d37091a61a719fbb5", "fetched_at": "2026-08-29T12:28:03.503151+00:00", "kind": "homepage", "missing": false, "url": "https://zenity.io/zenity-security-assessment-hub"}, {"content_hash": "90c15ce6d0426f1d49a8c5b6ac02424d351f8f1278c69f3b7b698dff780955f2", "fetched_at": "2026-08-29T12:28:03.512626+00:00", "kind": "site_page", "missing": false, "url": "https://zenity.io/company"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T06:20:42.686647+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "2a10143e2c99eb21d4a7283439e44c9c71f1ddbf910cd2281bad36ddf57a0eea", "fetched_at": "2026-08-28T04:03:58.233591+00:00", "kind": "readme", "missing": false, "url": "https://github.com/mbrg/power-pwn"}, {"content_hash": "c49bb87654090d14fd9a6d0ca1f159981fec68877813039d37091a61a719fbb5", "fetched_at": "2026-08-29T12:28:03.503151+00:00", "kind": "homepage", "missing": false, "url": "https://zenity.io/zenity-security-assessment-hub"}, {"content_hash": "90c15ce6d0426f1d49a8c5b6ac02424d351f8f1278c69f3b7b698dff780955f2", "fetched_at": "2026-08-29T12:28:03.512626+00:00", "kind": "site_page", "missing": false, "url": "https://zenity.io/company"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T06:20:42.686647+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "2a10143e2c99eb21d4a7283439e44c9c71f1ddbf910cd2281bad36ddf57a0eea", "fetched_at": "2026-08-28T04:03:58.233591+00:00", "kind": "readme", "missing": false, "url": "https://github.com/mbrg/power-pwn"}, {"content_hash": "c49bb87654090d14fd9a6d0ca1f159981fec68877813039d37091a61a719fbb5", "fetched_at": "2026-08-29T12:28:03.503151+00:00", "kind": "homepage", "missing": false, "url": "https://zenity.io/zenity-security-assessment-hub"}, {"content_hash": "90c15ce6d0426f1d49a8c5b6ac02424d351f8f1278c69f3b7b698dff780955f2", "fetched_at": "2026-08-29T12:28:03.512626+00:00", "kind": "site_page", "missing": false, "url": "https://zenity.io/company"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T06:20:42.686647+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "2a10143e2c99eb21d4a7283439e44c9c71f1ddbf910cd2281bad36ddf57a0eea", "fetched_at": "2026-08-28T04:03:58.233591+00:00", "kind": "readme", "missing": false, "url": "https://github.com/mbrg/power-pwn"}, {"content_hash": "c49bb87654090d14fd9a6d0ca1f159981fec68877813039d37091a61a719fbb5", "fetched_at": "2026-08-29T12:28:03.503151+00:00", "kind": "homepage", "missing": false, "url": "https://zenity.io/zenity-security-assessment-hub"}, {"content_hash": "90c15ce6d0426f1d49a8c5b6ac02424d351f8f1278c69f3b7b698dff780955f2", "fetched_at": "2026-08-29T12:28:03.512626+00:00", "kind": "site_page", "missing": false, "url": "https://zenity.io/company"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 58, "longevity": 100, "rhythm": 48}, "computed_at": "2026-09-02T17:46:02.011165+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 1541, "days_push": 255, "days_rel": 266, "gap_med": 61.5, "n_releases_24m": 3}, "score": 63, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}