Tenant information This Open-source Intelligence (OSINT) tool will extract openly available information for the given tenant. The tool is using APIs mentioned in my previous blog post and in MS Graph API documentation. Domain details is returned only for the 20 first domains. For complete recon information, please use AADInternals PowerShell module. Note: CBA status is valid ONLY if email of an existing user is given. Using tenant id, domain name, or email of non-existing user may show false negatives.

OneDrive has a security option to allow syncing only from PCs joined to specific domains. In this blog, using the latest AADInternals toolkit (announced at Black Hat Europe 2019), I’ll show how the domain restrictions can be easily bypassed.

Did you know that you could get a free custom domain for your Office 365 or Azure AD tenant?

In this blog, I will describe a security vulnerability I discovered and reported to Microsoft in October. The vulnerability was disclosed in LIVE!360 TECHMENTOR event in Orlando on Nov 16th 2017.

LIVE!360 event started today at Loews Royal Pacific Resort in Orlando.

Tools for hacking and administering Azure AD & Microsoft 365

This article have all the important links you need to administer Office 365

Welcome to my Office 365 blog!

In this blog I’ll discuss about various aspects of administering Office 365 suite.