device-code-phishing

Here are 4 public repositories matching this topic...

redinpulse / RinP-Kodes-M365-Stealer

M365 red-team platform device-code phishing, token harvesting, service-token minting, in-panel data collection and SOCKS5 reverse tunneling

powershell offensive-security azure-ad security-research red-teaming microsoft-365 device-code-phishing tokentactics aadinternals m365-stealer redinpulse

Updated Sep 7, 2026
PowerShell

MohammadThabetHassan / TokenAbuse-Azure

Star

Walkthrough of an authorized cloud red-team CTF I solved: OAuth device-code phishing, token theft, Microsoft Graph and SharePoint enumeration, exfiltration. Plus the KQL hunts and Conditional Access policy that catch it.

threat-hunting ctf-writeup kql microsoft-sentinel entra-id device-code-phishing

Updated Sep 26, 2026
PowerShell

idacyber1 / devicecode-phishing-analysis

Star

Defender-focused analysis of a Microsoft 365 device-code phishing campaign (OAuth device-authorization abuse, MFA-bypassing) - defanged IOCs, Entra hunting, no live samples.

oauth phishing threat-intelligence detection-engineering mfa-bypass microsoft-365 device-code-phishing