Tag: Red Teaming 2026
-

The Serverless Spectre: How TokenFlare is Redefining M365 Phishing with Built-In Intune Bypasses
TokenFlare Serverless AITM Phishing Simulation Framework for Entra ID / M365 Features Lean: Core logic (in src/worker.js only ~530 lines of JavaScript). Modular: Supports a number of OAuth flows, with Intune Conditional Access bypass support out of the box Easily tweaked: Set up client branding, URL structure (custom lure path and parameter), final redirect after completing auth, and more,…