97 Commits

Author SHA1 Message Date
Beau Bullock 4ea4d95804 Fix support for pwsh 5.1 2026-04-09 16:13:38 -04:00
Beau Bullock a182e0a625 Refactored Invoke-DumpCAPS and Invoke-DumpApps 2026-04-07 15:49:43 -04:00
Beau Bullock 7a01957800 Added group type filter to Get-SecurityGroups 2026-04-07 13:44:46 -04:00
Beau Bullock 210f8e2b9c Merge branch 'main' into main 2026-04-07 12:11:54 -04:00
Beau Bullock f57abcb9dd Added Get-DirectoryRoles Function 2026-04-07 11:41:06 -04:00
Beau Bullock c034525183 Added Find-PermissiveCalendars function 2026-04-07 11:20:50 -04:00
Beau Bullock 5878016515 Updated Get-SharePointSiteURLs with batching and fixed a typo in Get-Inbox 2026-04-07 10:59:22 -04:00
Beau Bullock 806648f713 Updated Invoke-SearchMailbox parsing logic 2026-04-06 16:17:36 -04:00
Beau Bullock 471dc90b97 Merge pull request #27 from romisfrag/main
Fixe #26 Invoke-SearchMailbox bug
2026-04-06 15:50:40 -04:00
Beau Bullock c828085bfc Updated Invoke-AutoOAuthFlow Listener 2026-03-27 08:07:38 -04:00
Curtis Ringwald 42673e2691 Update GraphRunner.ps1
Fixed the following errors:

At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7771 char:42
+     Write-Host -ForegroundColor green "--------------------- Persiste ...
+                                          ~~~~~~~~~~~~~~~~~~~
Unexpected token '-------------------' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7771 char:61
+     Write-Host -ForegroundColor green "--------------------- Persiste ...
+                                                             ~
Missing expression after unary operator '-'.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7771 char:62
+ ... ost -ForegroundColor green "--------------------- Persistence Modules ...
+                                                       ~~~~~~~~~~~
Unexpected token 'Persistence' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7778 char:42
+ ...    Write-Host -ForegroundColor green "----------------------- Pillage ...
+                                             ~~~~~~~~~~~~~~~~~~~~~
Unexpected token '---------------------' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7778 char:63
+ ...    Write-Host -ForegroundColor green "----------------------- Pillage ...
+                                                                  ~
Missing expression after unary operator '-'.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7778 char:64
+ ... -Host -ForegroundColor green "----------------------- Pillage Modules ...
+                                                           ~~~~~~~
Unexpected token 'Pillage' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7799 char:42
+     Write-Host -ForegroundColor green "--------------------- GraphRun ...
+                                          ~~~~~~~~~~~~~~~~~~~
Unexpected token '-------------------' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7799 char:61
+     Write-Host -ForegroundColor green "--------------------- GraphRun ...
+                                                             ~
Missing expression after unary operator '-'.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7799 char:62
+ ... ost -ForegroundColor green "--------------------- GraphRunner Module  ...
+                                                       ~~~~~~~~~~~
Unexpected token 'GraphRunner' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7817 char:90
+ ... or green '[*] For help with individual modules run Get-Help <module n ...
+                                                                 ~
The '<' operator is reserved for future use.
Not all parse errors were reported.  Correct the reported errors and try again.
    + CategoryInfo          : ParserError: (:) [], ParentContainsErrorRecordException
    + FullyQualifiedErrorId : UnexpectedToken

PS C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main>
PS C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main> ipmo .\GraphRunner.ps1
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7771 char:42
+     Write-Host -ForegroundColor green "--------------------- Persiste ...
+                                          ~~~~~~~~~~~~~~~~~~~
Unexpected token '-------------------' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7771 char:61
+     Write-Host -ForegroundColor green "--------------------- Persiste ...
+                                                             ~
Missing expression after unary operator '-'.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7771 char:62
+ ... ost -ForegroundColor green "--------------------- Persistence Modules ...
+                                                       ~~~~~~~~~~~
Unexpected token 'Persistence' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7778 char:42
+ ...    Write-Host -ForegroundColor green "----------------------- Pillage ...
+                                             ~~~~~~~~~~~~~~~~~~~~~
Unexpected token '---------------------' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7778 char:63
+ ...    Write-Host -ForegroundColor green "----------------------- Pillage ...
+                                                                  ~
Missing expression after unary operator '-'.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7778 char:64
+ ... -Host -ForegroundColor green "----------------------- Pillage Modules ...
+                                                           ~~~~~~~
Unexpected token 'Pillage' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7799 char:42
+     Write-Host -ForegroundColor green "--------------------- GraphRun ...
+                                          ~~~~~~~~~~~~~~~~~~~
Unexpected token '-------------------' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7799 char:61
+     Write-Host -ForegroundColor green "--------------------- GraphRun ...
+                                                             ~
Missing expression after unary operator '-'.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7799 char:62
+ ... ost -ForegroundColor green "--------------------- GraphRunner Module  ...
+                                                       ~~~~~~~~~~~
Unexpected token 'GraphRunner' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7817 char:90
+ ... or green '[*] For help with individual modules run Get-Help <module n ...
+                                                                 ~
The '<' operator is reserved for future use.
Not all parse errors were reported.  Correct the reported errors and try again.
    + CategoryInfo          : ParserError: (:) [], ParentContainsErrorRecordException
    + FullyQualifiedErrorId : UnexpectedToken

PS C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main>
PS C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main> ipmo .\GraphRunner.ps1
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7771 char:42
+     Write-Host -ForegroundColor Green "--------------------- Persiste ...
+                                          ~~~~~~~~~~~~~~~~~~~
Unexpected token '-------------------' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7771 char:61
+     Write-Host -ForegroundColor Green "--------------------- Persiste ...
+                                                             ~
Missing expression after unary operator '-'.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7771 char:62
+ ... ost -ForegroundColor Green "--------------------- Persistence Modules ...
+                                                       ~~~~~~~~~~~
Unexpected token 'Persistence' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7778 char:42
+ ...    Write-Host -ForegroundColor green "----------------------- Pillage ...
+                                             ~~~~~~~~~~~~~~~~~~~~~
Unexpected token '---------------------' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7778 char:63
+ ...    Write-Host -ForegroundColor green "----------------------- Pillage ...
+                                                                  ~
Missing expression after unary operator '-'.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7778 char:64
+ ... -Host -ForegroundColor green "----------------------- Pillage Modules ...
+                                                           ~~~~~~~
Unexpected token 'Pillage' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7799 char:42
+     Write-Host -ForegroundColor green "--------------------- GraphRun ...
+                                          ~~~~~~~~~~~~~~~~~~~
Unexpected token '-------------------' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7799 char:61
+     Write-Host -ForegroundColor green "--------------------- GraphRun ...
+                                                             ~
Missing expression after unary operator '-'.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7799 char:62
+ ... ost -ForegroundColor green "--------------------- GraphRunner Module  ...
+                                                       ~~~~~~~~~~~
Unexpected token 'GraphRunner' in expression or statement.
At C:\Users\Curtis.Ringwald\Downloads\GraphRunner-main\GraphRunner-main\GraphRunner.ps1:7817 char:90
+ ... or green '[*] For help with individual modules run Get-Help <module n ...
+                                                                 ~
The '<' operator is reserved for future use.
Not all parse errors were reported.  Correct the reported errors and try again.
    + CategoryInfo          : ParserError: (:) [], ParentContainsErrorRecordException
    + FullyQualifiedErrorId : UnexpectedToken
2025-07-16 17:32:39 -04:00
nyxgeek d56a024281 Added Check-FrontDoorWAF function
Added function to check for insecure Front Door WAF configuration
2025-07-10 08:32:41 -05:00
Beau Bullock 8a0e3399f3 Update GraphRecon to use modern Graph API 2025-07-03 10:01:48 -04:00
Steve Borosh 7814f38ddb Update GraphRunner.ps1
Fix errant headers. https://github.com/dafthack/GraphRunner/issues/39
2024-11-06 22:37:32 -06:00
Steve Borosh 313225d712 Update GraphRunner.ps1
Added Delay and Jitter so we can all do the jitterbug around defenders. :)
2024-11-04 23:28:13 -06:00
Steve Borosh c40e076210 Update GraphRunner.ps1
Fix errant comment
2024-11-04 22:52:38 -06:00
Steve Borosh d2fb300d95 Update GraphRunner.ps1
Added some basic detection evasion delays to Invoke-GraphRunner
2024-11-04 22:51:21 -06:00
Steve Borosh d77b88c490 Update GraphRunner.ps1
Updated UserAgent header flow.
2024-11-04 22:31:30 -06:00
Steve Borosh c0c29814d5 Update GraphRunner.ps1
Added UserAgent flow to Invoke-DriveFileDownload.
2024-11-04 13:00:35 -06:00
Steve Borosh 1339c86e53 Update GraphRunner.ps1
Initial push to fix some User Agent flow.
2024-10-24 15:45:51 -06:00
Kadawi a65b151e7d Add option to download all sharepoint/onedrive search results. 2024-09-23 17:50:47 -05:00
husky 4006238d58 fixing browser param 2024-07-09 11:40:16 -04:00
husky 5d4424e229 update module list 2024-07-09 11:34:07 -04:00
husky 4de411e500 params and description 2024-07-09 11:28:31 -04:00
husky 08576d8a6e adding inbox forwarding rule function with teams client ID 2024-07-09 11:21:50 -04:00
Tylous 7305f6ec88 Added Microsoft Team Attacks 2024-03-14 13:04:33 -04:00
romisfrag a2c22858a0 Update GraphRunner.ps1
Fixed the issue in Invoke-SearchMailbox when trying to download files
2024-01-05 14:55:11 +01:00
Beau Bullock 719bb77aef Merge pull request #25 from sleeptok3n/patch-4
Throttle added to Invoke-SearchUserAttributes
2024-01-02 15:28:55 -05:00
Beau Bullock 78ca3c4ada Merge pull request #17 from ville87/main
Added UseBasicParsing parameter to Invoke-WebRequest calls
2024-01-02 15:23:55 -05:00
sleeptok3n 91efe4eff0 Throttle added to Invoke-SearchUserAttributes
Throttle added to avoid a rain of 429's
2023-12-20 17:36:29 +02:00
Tylous 4d8491b0a3 Update GraphRunner.ps1 2023-12-05 15:48:31 -05:00
Steve Borosh 7fd1cf20da Update GraphRunner.ps1
Thanks https://github.com/LambdaArrow for the suggested fix.
2023-11-20 08:23:02 -05:00
Matthew Eidelberg bebd9802a5 Added check for global token 2023-11-14 14:40:16 -05:00
Matthew Eidelberg 017fa0990d Fixed token issue 2023-11-14 12:25:11 -05:00
Matthew Eidelberg 31c3aa2951 Adding Get-TeamsApps Function 2023-11-10 13:23:57 -05:00
Ville Koch bd8e134241 added UseBasicParsing parameter to Invoke-WebRequest calls 2023-11-06 15:35:10 +02:00
Beau Bullock 4c0c88ee01 Added Get-EntraIDGroupInfo function & fixed AutoRefresh on Group functions 2023-11-03 16:15:11 -04:00
C0axx 6bacd02df2 Update GraphRunner.Ps1
Added Attendees Parameter
2023-11-01 18:00:43 -04:00
C0axx fa604c9a5c Update GraphRunner.ps1
Added Invoke-CreateCalendarEvent function :)
2023-11-01 17:37:43 -04:00
C0axx 51f201ca72 Update GraphRunner.ps1
Added throttle detection to Get-UpdatableGroups
2023-11-01 12:21:11 -04:00
C0axx eb7a565450 Update GraphRunner.ps1
More updates to Refresh Functions
2023-11-01 11:00:34 -04:00
C0axx b5fb8ef6ae Update Graphrunner.ps1
Added Token Auto Refresh Capabilities and Parameter Updates to Get-SecurityGroups and Get-UpdatableGroups
2023-10-31 09:47:24 -04:00
C0axx 9d2e9c1606 Update Graphrunner.ps1
Added Token Auto Refresh Capabilities to Get-SecurityGroups and Get-UpdatableGroups
2023-10-31 09:08:51 -04:00
NinjaStyle82 7ce4a59505 Added throttle handing for users pull 2023-10-24 14:25:50 -06:00
Steve Borosh 17300b55cd Update GraphRunner.ps1
Add customizable options
2023-10-20 10:33:58 -06:00
Steve Borosh a5c3e375a8 Update GraphRunner.ps1
Add options to customize requests.
2023-10-20 10:24:00 -06:00
Steve Borosh 09db178485 Update GraphRunner.ps1
Add Invoke-ForgeUserAgent parameters to Get-GraphTokens
2023-10-17 07:12:55 -06:00
Beau Bullock 4295172a82 Update GraphRunner.ps1 2023-10-11 16:15:41 -04:00
Beau Bullock c94d25d559 Update GraphRunner.ps1 2023-10-10 12:59:46 -04:00
Beau Bullock e9a805c411 Added Get-UserObjectID 2023-10-10 12:56:56 -04:00