Skip to content

v1.4

Latest

Choose a tag to compare

@h4wkst3r h4wkst3r released this 15 Mar 18:32
72ab096

New module from @RalphDesmangles:

Adds a new recon module, listorgs, enabling operators to enumerate Azure DevOps organizations using a valid access token. The module supports two modes:

  • Default Mode: Lists only the organizations the provided access token has direct access to.
  • AAD Mode (/mode:aad): Enumerates all organizations within the Azure AD tenant.
    • Operators can override the default AEX endpoint by specifying /endpoint:ENDPOINT_NAME.

This module enhances situational awareness when an operator obtains a valid token (e.g., from a beacon or phishing scenario) but lacks visibility into the organizations linked to it.