Home

msInvader Documentation

Table of Contents

• OAuth Methods and Attack Simulations
  • Resource Owner Password Credentials (ROPC) Flow
  • Device Authorization Authentication
  • Client Credentials Flow
• msInvader Access Methods
  • Graph API
  • Exchange Web Services (EWS)
  • REST API Leveraged by the Exchange Online PowerShell Module
• msInvader Configuration File
  • Authentication Section
    • Sessions SubSection
  • Techniques Section
• Supported Techniques
  • read_email
  • search_mailbox
  • search_onedrive
  • create_rule
  • enable_email_forwarding
  • add_folder_permission
  • add_mailbox_delegation
  • run_compliance_search
  • create_mailflow_rule
  • password_spray
  • change_user_password
  • assign_app_role
  • assign_entra_role
  • add_application_secret
  • add_service_principal
  • admin_consent
  • create_application_registration
  • send_email
  • enumerate_users
  • enumerate_groups
  • enumerate_applications
  • enumerate_service_principals
  • enumerate_directory_roles