ROADtools

ROADtools are "A collection of Azure AD/Entra tools for offensive and defensive security purposes."

Install

Check the wiki but I just use the ROADtools baked into exegol.

Authenticate

I learned in this issue that it helps to specify the client ID of Azure CLI:

roadrecon auth --device-code -c 04b07795-8ddb-461a-bbee-02f9e1bf7b46

Gather the goods

roadrecon gather

Review gathered info

I find it quickest and easiest (especially on a headless Linux box) to spin up a GUI I can hit from another VM with a browser:

roadrecon gui --host 0.0.0.0 --port 7777