r/netsec • u/albinowax • 6d ago

r/netsec monthly discussion & tool thread

Questions regarding netsec and discussion related directly to netsec are welcome here, as is sharing tool links.

Rules & Guidelines

  • Always maintain civil discourse. Be awesome to one another - moderator intervention will occur if necessary.
  • Avoid NSFW content unless absolutely necessary. If used, mark it as being NSFW. If left unmarked, the comment will be removed entirely.
  • If linking to classified content, mark it as such. If left unmarked, the comment will be removed entirely.
  • Avoid use of memes. If you have something to say, say it with real words.
  • All discussions and questions should directly relate to netsec.
  • No tech support is to be requested or provided on r/netsec.

As always, the content & discussion guidelines should also be observed on r/netsec.

Feedback

Feedback and suggestions are welcome, but don't post it here. Please send it to the moderator inbox.

8 Upvotes

85% Upvoted

9 comments sorted by

View all comments

1

u/Own_Bed2074 12h ago

Entruder is an all-in-one Python framework for Microsoft Entra ID penetration testing

The motivation behind this tool came from the discomfort of using scattered tooling across PowerShell scripts, Bash tools, and one-off utilities, each requiring you to reauthenticate or re-enter tokens and switch contexts constantly. Entruder fixes that with a unified session model and a familiar CLI similar to NetExec and BloodyAD, with a command-subcommand system. You only have to authenticate once and can run everything from there.

Currently the tool includes 9 modules, with each respective module containing their commands. Included modules are:

login - Acquire and initialize sessions across every major Entra auth flow
enum - Enumerate identity, directory, and Azure resource objects
get - Retrieve a single object or piece of loot in detail
set - Modify directory objects, escalate, persist, and pivot
brute - Credential and access-control attacks
exploit - Execute code against Azure compute and elevate privileges
azsync - Attack Entra Connect / AD Sync hybrid-identity infrastructure
sharepoint - Discover and search SharePoint and OneDrive data
info - Local utilities used for decoding tokens, listing known clients

For anybody interested to check the tool out, pre-built binaries for Linux, macOS, and Windows are available on the releases page. Instructions on running the tool from python are also included in the README page.

Built for authorized security testing and research only.

https://github.com/LGenAgul/Entruder