Additional Guides

Abusing guest accounts

TBD

Using tokens from ROADtools

TBD

Combine with other awesome tools

AADInternals

• Introducing a new phishing technique for compromising Office 365 accounts
• Quest for guest access: Azure Active Directory reconnaissance as a guest

ROADtools

• ROADtools Token eXchange (roadtx)

TokenTactics

• Azure JSON Web Token ("JWT") Manipulation Toolset