MAAD-AF - MAAD Attack Framework - An attack tool for simple,

项目说明

MAAD Attack Framework

!MAAD_Logo

MAAD-AF is an open-source cloud attack tool for Microsoft 365 & Entra ID(Azure AD) en.

MAAD-AF offers simple, fast and effecti testing. Microsoft cloud controls and test detection & response capabilities with a zero-setup process, complete with a fully interacti for executing emulated attacks.

MAAD-AF is de natively in PowerShell.

Usage

1. Clone or download MAAD-AF from GitHub
2. Start PowerShell as Admin and na to MAAD-AF directory

3. Launch MAAD-AF

Requirements

1. Windows host
2. PowerShell 5.1

Features

Attack emulation tool

Fully interacti) workflow

Zero-setup deployment

Ability to revert actions for post-testing cleanup

Le MITRE ATT&CK

Emulate post-compromise attack techniques

Attack techniques for Entra ID (Azure AD)

Attack techniques for Exchange Online

Attack techniques for Teams

Attack techniques for SharePoint

Attack techniques for eDiscovery

MAAD-AF Techniques

Recon data from Microsoft services

Backdoor Account Setup

Trusted Network Modification

Mailbox Audit Bypass

Disable Anti-Phishing in Exchange

Mailbox Deletion Rule Setup

Exfiltration through Mail Forwarding

Gain User Mailbox Access

Setup External Teams Access

Exploit Cross Tenant Synchronization

eDiscovery exploitation for data recon & exfil

Bruteforce credentials

MFA Manipulation

User Account Deletion

SharePoint exploitation for data recon & exfil

More...

Contribute

- Thanks for considering contributing to MAAD-AF! Your contributions will help make MAAD-AF better.
- Submit your PR to the main branch.
- Submit bugs & issues directly to GitHub Issues
- Share ideas in GitHub Discussions

Contact

If you found MAAD-AF useful, want to share an interesting use-case or idea - reach out & share them
- Maintainer : Arpan Sarkar
- Email : MAAD-AF@.ai

项目信息

开发语言：PowerShell

Star 数：431

技术要点

该项目属于红蓝攻防方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕MAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。