Flangvik/TeamFiltration

Health v2 · maintenance only

Adoption not part of the score

1399 stars · 151 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

TeamFiltration is a cross-platform penetration testing framework for enumerating, password spraying, exfiltrating data from, and backdooring O365/Entra ID (Azure AD) accounts. It is a C# CLI tool used internally at TrustedSec and released publicly, with precompiled binaries for Linux, Windows, and macOS.

Use cases

• enumerate valid O365 user accounts
• password spray Entra ID tenants
• exfiltrate data from compromised O365 accounts
• backdoor Azure AD accounts for persistence
• route spraying traffic through a proxy
• red team assessment of Microsoft 365 identity

When to choose

• you are an authorized red teamer or pentester targeting O365/Entra ID
• you need a single cross-platform binary with no .NET dependencies
• you want proxy support for enumeration and spraying traffic

When to avoid

• you lack explicit authorization to test the target tenant
• you need defensive monitoring rather than offensive tooling
• you rely on the removed AWS Fireprox functionality

Facets

cli-tool · maturity active

security penetration-testing osint cli security penetration-testing cloud-computing cross-platform windows cli dotnet red-team office365 entra-id password-spraying account-enumeration exfiltration backdooring csharp linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Flangvik/TeamFiltration")