164 Commits

Author SHA1 Message Date
Beau Bullock 4ea4d95804 Fix support for pwsh 5.1 2026-04-09 16:13:38 -04:00
Beau Bullock a182e0a625 Refactored Invoke-DumpCAPS and Invoke-DumpApps 2026-04-07 15:49:43 -04:00
Beau Bullock 7a01957800 Added group type filter to Get-SecurityGroups 2026-04-07 13:44:46 -04:00
Beau Bullock 48ded13e0e Merge pull request #33 from HuskyHacks/main
[New Module] Invoke-CreateInboxForwardingRule
2026-04-07 12:12:13 -04:00
Beau Bullock 210f8e2b9c Merge branch 'main' into main 2026-04-07 12:11:54 -04:00
Beau Bullock f57abcb9dd Added Get-DirectoryRoles Function 2026-04-07 11:41:06 -04:00
Beau Bullock c034525183 Added Find-PermissiveCalendars function 2026-04-07 11:20:50 -04:00
Beau Bullock 5878016515 Updated Get-SharePointSiteURLs with batching and fixed a typo in Get-Inbox 2026-04-07 10:59:22 -04:00
Beau Bullock 806648f713 Updated Invoke-SearchMailbox parsing logic 2026-04-06 16:17:36 -04:00
Beau Bullock 471dc90b97 Merge pull request #27 from romisfrag/main
Fixe #26 Invoke-SearchMailbox bug
2026-04-06 15:50:40 -04:00
Beau Bullock c828085bfc Updated Invoke-AutoOAuthFlow Listener 2026-03-27 08:07:38 -04:00
Beau Bullock b4830d301f Merge pull request #46 from C0axx/patch-1
Update GraphRunner.ps1
2025-07-22 08:20:12 -04:00
Curtis Ringwald 42673e2691 Update GraphRunner.ps1
Fixed the following errors:

At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7771 char:42
+     Write-Host -ForegroundColor green "--------------------- Persiste ...
+                                          ~~~~~~~~~~~~~~~~~~~
Unexpected token '-------------------' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7771 char:61
+     Write-Host -ForegroundColor green "--------------------- Persiste ...
+                                                             ~
Missing expression after unary operator '-'.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7771 char:62
+ ... ost -ForegroundColor green "--------------------- Persistence Modules ...
+                                                       ~~~~~~~~~~~
Unexpected token 'Persistence' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7778 char:42
+ ...    Write-Host -ForegroundColor green "----------------------- Pillage ...
+                                             ~~~~~~~~~~~~~~~~~~~~~
Unexpected token '---------------------' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7778 char:63
+ ...    Write-Host -ForegroundColor green "----------------------- Pillage ...
+                                                                  ~
Missing expression after unary operator '-'.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7778 char:64
+ ... -Host -ForegroundColor green "----------------------- Pillage Modules ...
+                                                           ~~~~~~~
Unexpected token 'Pillage' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7799 char:42
+     Write-Host -ForegroundColor green "--------------------- GraphRun ...
+                                          ~~~~~~~~~~~~~~~~~~~
Unexpected token '-------------------' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7799 char:61
+     Write-Host -ForegroundColor green "--------------------- GraphRun ...
+                                                             ~
Missing expression after unary operator '-'.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7799 char:62
+ ... ost -ForegroundColor green "--------------------- GraphRunner Module  ...
+                                                       ~~~~~~~~~~~
Unexpected token 'GraphRunner' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7817 char:90
+ ... or green '[*] For help with individual modules run Get-Help <module n ...
+                                                                 ~
The '<' operator is reserved for future use.
Not all parse errors were reported.  Correct the reported errors and try again.
    + CategoryInfo          : ParserError: (:) [], ParentContainsErrorRecordException
    + FullyQualifiedErrorId : UnexpectedToken

PS C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main>
PS C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main> ipmo .\GraphRunner.ps1
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7771 char:42
+     Write-Host -ForegroundColor green "--------------------- Persiste ...
+                                          ~~~~~~~~~~~~~~~~~~~
Unexpected token '-------------------' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7771 char:61
+     Write-Host -ForegroundColor green "--------------------- Persiste ...
+                                                             ~
Missing expression after unary operator '-'.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7771 char:62
+ ... ost -ForegroundColor green "--------------------- Persistence Modules ...
+                                                       ~~~~~~~~~~~
Unexpected token 'Persistence' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7778 char:42
+ ...    Write-Host -ForegroundColor green "----------------------- Pillage ...
+                                             ~~~~~~~~~~~~~~~~~~~~~
Unexpected token '---------------------' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7778 char:63
+ ...    Write-Host -ForegroundColor green "----------------------- Pillage ...
+                                                                  ~
Missing expression after unary operator '-'.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7778 char:64
+ ... -Host -ForegroundColor green "----------------------- Pillage Modules ...
+                                                           ~~~~~~~
Unexpected token 'Pillage' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7799 char:42
+     Write-Host -ForegroundColor green "--------------------- GraphRun ...
+                                          ~~~~~~~~~~~~~~~~~~~
Unexpected token '-------------------' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7799 char:61
+     Write-Host -ForegroundColor green "--------------------- GraphRun ...
+                                                             ~
Missing expression after unary operator '-'.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7799 char:62
+ ... ost -ForegroundColor green "--------------------- GraphRunner Module  ...
+                                                       ~~~~~~~~~~~
Unexpected token 'GraphRunner' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7817 char:90
+ ... or green '[*] For help with individual modules run Get-Help <module n ...
+                                                                 ~
The '<' operator is reserved for future use.
Not all parse errors were reported.  Correct the reported errors and try again.
    + CategoryInfo          : ParserError: (:) [], ParentContainsErrorRecordException
    + FullyQualifiedErrorId : UnexpectedToken

PS C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main>
PS C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main> ipmo .\GraphRunner.ps1
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7771 char:42
+     Write-Host -ForegroundColor Green "--------------------- Persiste ...
+                                          ~~~~~~~~~~~~~~~~~~~
Unexpected token '-------------------' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7771 char:61
+     Write-Host -ForegroundColor Green "--------------------- Persiste ...
+                                                             ~
Missing expression after unary operator '-'.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7771 char:62
+ ... ost -ForegroundColor Green "--------------------- Persistence Modules ...
+                                                       ~~~~~~~~~~~
Unexpected token 'Persistence' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7778 char:42
+ ...    Write-Host -ForegroundColor green "----------------------- Pillage ...
+                                             ~~~~~~~~~~~~~~~~~~~~~
Unexpected token '---------------------' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7778 char:63
+ ...    Write-Host -ForegroundColor green "----------------------- Pillage ...
+                                                                  ~
Missing expression after unary operator '-'.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7778 char:64
+ ... -Host -ForegroundColor green "----------------------- Pillage Modules ...
+                                                           ~~~~~~~
Unexpected token 'Pillage' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7799 char:42
+     Write-Host -ForegroundColor green "--------------------- GraphRun ...
+                                          ~~~~~~~~~~~~~~~~~~~
Unexpected token '-------------------' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7799 char:61
+     Write-Host -ForegroundColor green "--------------------- GraphRun ...
+                                                             ~
Missing expression after unary operator '-'.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7799 char:62
+ ... ost -ForegroundColor green "--------------------- GraphRunner Module  ...
+                                                       ~~~~~~~~~~~
Unexpected token 'GraphRunner' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7817 char:90
+ ... or green '[*] For help with individual modules run Get-Help <module n ...
+                                                                 ~
The '<' operator is reserved for future use.
Not all parse errors were reported.  Correct the reported errors and try again.
    + CategoryInfo          : ParserError: (:) [], ParentContainsErrorRecordException
    + FullyQualifiedErrorId : UnexpectedToken
2025-07-16 17:32:39 -04:00
Beau Bullock f5eaf10363 Merge pull request #45 from nyxgeek/main
Added Check-FrontDoorWAF function
2025-07-10 12:14:04 -04:00
nyxgeek d56a024281 Added Check-FrontDoorWAF function
Added function to check for insecure Front Door WAF configuration
2025-07-10 08:32:41 -05:00
Beau Bullock 8a0e3399f3 Update GraphRecon to use modern Graph API 2025-07-03 10:01:48 -04:00
Steve Borosh 2379d17d1d Merge pull request #40 from rvrsh3ll/main
Fix default device and errant header variables.
2024-11-06 22:40:33 -06:00
Steve Borosh 6afccaccfb Merge branch 'dafthack:main' into main 2024-11-06 22:38:31 -06:00
Steve Borosh 7814f38ddb Update GraphRunner.ps1
Fix errant headers. https://github.com/dafthack/GraphRunner/issues/39
2024-11-06 22:37:32 -06:00
Steve Borosh 23d1edb4db Merge pull request #38 from rvrsh3ll/main
GraphRunner - Bypasses Every Product Ever Update..
2024-11-04 23:35:44 -06:00
Steve Borosh 313225d712 Update GraphRunner.ps1
Added Delay and Jitter so we can all do the jitterbug around defenders. :)
2024-11-04 23:28:13 -06:00
Steve Borosh c40e076210 Update GraphRunner.ps1
Fix errant comment
2024-11-04 22:52:38 -06:00
Steve Borosh d2fb300d95 Update GraphRunner.ps1
Added some basic detection evasion delays to Invoke-GraphRunner
2024-11-04 22:51:21 -06:00
Steve Borosh d77b88c490 Update GraphRunner.ps1
Updated UserAgent header flow.
2024-11-04 22:31:30 -06:00
Steve Borosh c0c29814d5 Update GraphRunner.ps1
Added UserAgent flow to Invoke-DriveFileDownload.
2024-11-04 13:00:35 -06:00
Steve Borosh 1339c86e53 Update GraphRunner.ps1
Initial push to fix some User Agent flow.
2024-10-24 15:45:51 -06:00
Beau Bullock f31dd35033 Merge pull request #37 from Kadawi/k/download-all-sp-results
Add option to download all sharepoint/onedrive search results
2024-09-24 08:10:15 -04:00
Kadawi a65b151e7d Add option to download all sharepoint/onedrive search results. 2024-09-23 17:50:47 -05:00
husky 4006238d58 fixing browser param 2024-07-09 11:40:16 -04:00
husky 5d4424e229 update module list 2024-07-09 11:34:07 -04:00
husky 4de411e500 params and description 2024-07-09 11:28:31 -04:00
husky 08576d8a6e adding inbox forwarding rule function with teams client ID 2024-07-09 11:21:50 -04:00
Tylous 05d47114b5 Create IncomingWebhookTemplate.txt 2024-03-14 13:05:34 -04:00
Tylous 7305f6ec88 Added Microsoft Team Attacks 2024-03-14 13:04:33 -04:00
romisfrag a2c22858a0 Update GraphRunner.ps1
Fixed the issue in Invoke-SearchMailbox when trying to download files
2024-01-05 14:55:11 +01:00
Beau Bullock 719bb77aef Merge pull request #25 from sleeptok3n/patch-4
Throttle added to Invoke-SearchUserAttributes
2024-01-02 15:28:55 -05:00
Beau Bullock 78ca3c4ada Merge pull request #17 from ville87/main
Added UseBasicParsing parameter to Invoke-WebRequest calls
2024-01-02 15:23:55 -05:00
sleeptok3n 91efe4eff0 Throttle added to Invoke-SearchUserAttributes
Throttle added to avoid a rain of 429's
2023-12-20 17:36:29 +02:00
Tylous 4d8491b0a3 Update GraphRunner.ps1 2023-12-05 15:48:31 -05:00
Steve Borosh 7fd1cf20da Update GraphRunner.ps1
Thanks https://github.com/LambdaArrow for the suggested fix.
2023-11-20 08:23:02 -05:00
Steve Borosh 3d22124d9b Merge pull request #19 from Tylous/Get-TeamsApps
Added check for global token
2023-11-14 18:47:53 -05:00
Matthew Eidelberg bebd9802a5 Added check for global token 2023-11-14 14:40:16 -05:00
Steve Borosh 0cd3a285b2 Merge pull request #18 from Tylous/Get-TeamsApps
Adding Get-TeamsApps Function
2023-11-14 14:00:46 -05:00
Matthew Eidelberg 017fa0990d Fixed token issue 2023-11-14 12:25:11 -05:00
Matthew Eidelberg 31c3aa2951 Adding Get-TeamsApps Function 2023-11-10 13:23:57 -05:00
Ville Koch bd8e134241 added UseBasicParsing parameter to Invoke-WebRequest calls 2023-11-06 15:35:10 +02:00
Beau Bullock 4c0c88ee01 Added Get-EntraIDGroupInfo function & fixed AutoRefresh on Group functions 2023-11-03 16:15:11 -04:00
Steve Borosh 409ad481e3 Merge pull request #16 from C0axx/main
Update GraphRunner.ps1
2023-11-02 10:20:42 -04:00
C0axx 6bacd02df2 Update GraphRunner.Ps1
Added Attendees Parameter
2023-11-01 18:00:43 -04:00
C0axx fa604c9a5c Update GraphRunner.ps1
Added Invoke-CreateCalendarEvent function :)
2023-11-01 17:37:43 -04:00