New module from @RalphDesmangles:
Adds a new recon module, listorgs, enabling operators to enumerate Azure DevOps organizations using a valid access token. The module supports two modes:
- Default Mode: Lists only the organizations the provided access token has direct access to.
- AAD Mode (
/mode:aad): Enumerates all organizations within the Azure AD tenant.- Operators can override the default AEX endpoint by specifying
/endpoint:ENDPOINT_NAME.
- Operators can override the default AEX endpoint by specifying
This module enhances situational awareness when an operator obtains a valid token (e.g., from a beacon or phishing scenario) but lacks visibility into the organizations linked to it.