Tagged: OAuth Phishing

March 24, 2026

The Serverless Spectre: How TokenFlare is Redefining M365 Phishing with Built-In Intune Bypasses

TokenFlare Serverless AITM Phishing Simulation Framework for Entra ID / M365 Features Lean: Core logic (in src/worker.js only ~530 lines of JavaScript). Modular: Supports a number of OAuth flows, with Intune Conditional Access bypass support out of the...

Open Source Tool

December 4, 2025

OAuthSeeker: Red Team Tool for OAuth Phishing Attacks Against Azure and Office365

OAuthSeeker is an red team tool for performing phishing attacks using malicious OAuth applications to compromise user identities within Microsoft Azure and Office365. Features OAuthSeeker provides the following key features: Azure App OAuth Phishing: Perform OAuth...