# dirkjanm/ROADtools

A collection of Azure AD/Entra tools for offensive and defensive security purposes

Repository: https://github.com/dirkjanm/ROADtools
Canonical: https://ross.abutalabs.com/products/roadtools
Language: Python
License: MIT
License Family: permissive
Topics: azure-active-directory, azuread, microsoft-graph, python
Last push: 2026-08-05T13:43:22+00:00

## Health v2 (maintenance only)
Score: 75/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 96, release rhythm 35, longevity 100
- inputs: {"age_days": 2349, "days_push": 28, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2704, forks 390 (observed 2026-08-28T04:07:11.564947+00:00)

## What it is
ROADtools is a Python framework for interacting with Azure AD/Entra ID, comprising the roadlib authentication library, the ROADrecon exploration tool that dumps tenant data into a local database with an Angular GUI, and the roadtx token exchange tool. It is designed for both offensive (red team) and defensive (blue team) security analysis of Azure AD environments.

## Use cases
- enumerate Azure AD tenant information for security assessment
- dump Azure AD data into an offline database for analysis
- authenticate to Azure AD and request tokens programmatically
- audit Azure AD permissions and roles from a blue team perspective
- perform token exchange and device code phishing simulations
- explore Azure AD graph data offline via a web GUI

## When to choose
- you need to enumerate or audit an Azure AD/Entra tenant during a security assessment
- you want a scriptable Python library for Azure AD authentication and token handling
- you need offline analysis of Azure AD data with a rich GUI
- you are red or blue teaming Microsoft cloud environments

## When to avoid
- you need general-purpose Azure resource management rather than Azure AD specifics
- you want a passive monitoring or logging tool rather than an enumeration framework
- your environment does not permit Azure AD graph API access
- you need a GUI-first commercial product with vendor support

## Facets
- artifact type: framework
- maturity: active
- function: security, http-client, database, cli, developer-tools
- domain: security, cloud-computing, developer-tools, penetration-testing
- platform: python, cli, cross-platform
- tags: azure-ad, entra-id, red-team, offensive-security, microsoft-graph, token-exchange, roadrecon, roadtx

## Member repositories
- dirkjanm/ROADtools (main) score 75

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:07:11.564947+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T02:15:51.680353+00:00, confidence not recorded.
  - readme: https://github.com/dirkjanm/ROADtools (fetched 2026-08-28T04:07:11.564947+00:00, sha 37375ff61ab7)
  - registry_pypi: https://pypi.org/pypi/roadtools/json (fetched 2026-08-29T09:58:50.831213+00:00, sha d8d02959193e)
- Data as of 2026-08-30T08:39:29.467469+00:00.