ROADtools - A collection of Azure AD/Entra tools for offensive

项目说明

ROADtools

*(Rogue Office 365 and Azure (active) Directory tools)*

!Python 3 only
!License: MIT

<img src="roadrecon/frontend/src/assets/rt_transparent.svg" width="300px" alt="ROADtools logo" />

ROADtools is a 框架 to interact with Azure AD. It consists of a library (roadlib) with common components, the ROADrecon Azure AD exploration 工具 and the ROADtools Token eXchange (roadtx) 工具.

ROADlib

!PyPI

ROADlib is a library that can be used to authenticate with Azure AD or to build tools that integrate with a 数据库 containing ROADrecon data. The 数据库 model in ROADlib is automatically generated based on the metadata definition of the Azure AD internal API. ROADlib lives in the ROADtools namespace, so to import it in your scripts use from roadtools.roadlib import X

ROADrecon

!PyPI
![Build Status]()

ROADrecon is a 工具 for exploring information in Azure AD from both a Red Team and Blue Team perspective. In short, this is what it does:
* Uses an automatically generated metadata model to create an SQLAlchemy backed 数据库 on disk.
* Use asynchronous HTTP calls in Python to dump all a information in the Azure AD graph to this 数据库.
* Provide plugins to query this 数据库 and output it to a useful format.
* Provide an extensi built in Angular that queries the offline 数据库 directly for its analysis.

ROADrecon uses async Python features and is only compatible with Python 3.10 and newer (de is done with Python 3.11, tests are run with up to Python 3.14).

Installation

There are multiple ways to install ROADrecon:

Using a published on PyPi
Stable can be installed with pip install roadrecon. This will automatically add the roadrecon command to your PATH.

Using a from GitHub
Every commit to master is automatically built into a release with Azure Pipelines. This ensures that you can install the latest of the 界面 without having to install npm and all it's dependencies. You can download the roadlib and roadrecon build files from the Azure Pipelines artifacts (click on the button "1 Published". The build output files are stored in ROADtools.zip. You can either install the .whl or .tar.gz files directly using pip or unzip both and install the folders in the correct order (roadlib first):

You can also install them in de mode with pip install -e roadlib/.

De the front-end
If you want to make changes to the Angular front-end, you will need to have node and npm installed. Then install the components from git:

You can run the Angular frontend with npm start or ng serve using the Angular CLI from the roadrecon/frontend/ directory. To build the Ja files into ROADrecon's dist_gui directory, run npm run build.

Using ROADrecon

See this Wiki page on how to get started.

ROADtools Token eXchange (roadtx)

!PyPI
![Build Status]()

roadtx is a 工具 for exchanging and using different types of Azure AD issued tokens. It supports many different authentication flows, device registration and PRT related operations. For an o of the 工具, see the roadtx Wiki).

Installation

There are multiple ways to install roadtx. Note that roadtx requires Python 3.10 or newer.

Using a published on PyPi
Stable can be installed with pip install roadtx. This will automatically add the roadtx command to your PATH.

Using a from GitHub
You can clone this repository and install roadlib and then roadtx to make sure you have the latest of both the 工具 and the library:

You can also install them in de mode with pip install -e roadtx/.

Using roadtx

See the Wiki) on how to use roadtx. See also the release blog.

项目信息

开发语言：Python

Star 数：2731

技术要点

该项目属于安全软件方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕A collection of Azure AD/Entra tools for offensive and defensive security purposes展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。