Show HN: AI Agent for Microsoft Grap Red Team Framework

AI-Powered Multi-Agent Security Testing Framework for Microsoft Graph API Penetration Testing

The Microsoft Graph AI Red Team Framework is an advanced autonomous security testing tool that leverages GPT-4 powered AI agents to perform intelligent penetration testing against Microsoft Graph API endpoints. This framework automates the entire attack lifecycle from reconnaissance to exploitation using three specialized AI agents.

• Autonomous AI Agents: Three specialized agents (Scout, Strategist, Operative) work together to perform complex attack chains
• GPT-4 Powered Planning: Intelligent exploitation strategies generated dynamically based on available permissions
• Adaptive Attack Logic: Learns from failures and adjusts tactics in real-time
• Comprehensive Reconnaissance: Automated discovery of users, groups, applications, and sensitive resources
• Crown Jewel Detection: Automatically identifies and flags high-value targets
• Complete Audit Trail: All operations logged with curl equivalents for reproducibility
• Multi-Step Attack Chains: Orchestrates complex sequences like privilege escalation and persistence

• Red Team Operations: Automated Microsoft 365 and Azure AD penetration testing
• Security Assessments: Validate Graph API security controls and permissions
• OAuth Security Testing: Test application permission abuse scenarios
• Purple Team Exercises: Generate realistic attack patterns for detection engineering
• Security Research: Explore Microsoft Graph API attack surface
• Compliance Validation: Test security controls required by regulations

🎥 Watch the full demonstration from LASCON:

Click the image above to watch the complete walkthrough of autonomous AI-driven Graph API exploitation

• Analyzes OAuth token scopes and permissions
• Enumerates all accessible Microsoft Graph API endpoints
• Discovers users, groups, applications, devices, and roles
• Extracts entity IDs for exploitation chaining
• Identifies "crown jewel" targets (admin roles, audit logs, etc.)

• Powered by GPT-4 for intelligent attack planning
• Generates multi-step exploitation plans based on available permissions
• Adapts strategies when operations fail
• Prioritizes high-impact attack paths
• Creates realistic attack scenarios (privilege escalation, persistence, lateral movement)

• Executes attack plans with precision
• Handles dynamic placeholder resolution (user IDs, group IDs, etc.)
• Implements retry logic for transient failures
• Detects and flags successful crown jewel accesses
• Logs all operations with full curl command equivalents

• Python 3.8 or higher
• OpenAI API key (for GPT-4 access)
• Microsoft Graph API access token with appropriate scopes
• Azure CLI (for token acquisition)

1. Clone the repository

2. Install dependencies

3. Configure OpenAI API key

4. Acquire Microsoft Graph token

Choose one of the following methods:

Method 1: Quick Script (Easiest)

Method 2: Azure CLI

Method 3: Using PowerShell (Windows)

Method 4: Device Code Flow (Headless/Remote)

Method 5: Service Principal (Automated Testing)

Method 6: Browser Developer Tools (Manual)

1. Login to https://portal.azure.com
2. Open browser DevTools (F12)
3. Go to Network tab
4. Filter for "graph.microsoft.com"
5. Copy the Bearer token from Authorization header
6. Save to token.txt

Method 7: Using Postman/Insomnia

1. Create OAuth 2.0 request
2. Auth URL: https://login.microsoftonline.com/{tenant}/oauth2/v2.0/authorize
3. Access Token URL: https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token
4. Scope: https://graph.microsoft.com/.default
5. Copy access token to token.txt

Method 8: Python Script (Programmatic)

5. Run the framework

The framework will automatically:

1. Load and validate your Graph API token
2. Perform comprehensive reconnaissance
3. Generate AI-powered exploitation plans
4. Execute attacks with adaptive retry logic
5. Save all results to runs/{timestamp}/

The framework can autonomously execute various red team scenarios:

• Create backdoor admin accounts
• Assign Global Administrator roles
• Add users to privileged groups

• Create hidden OAuth applications
• Generate application secrets for persistent access
• Create service principals with high privileges

• Enumerate organizational structure
• Identify high-value users and groups
• Add backdoor accounts to sensitive groups

• Hide groups from Global Address List
• Create shadow infrastructure
• Minimize detection footprint

• Access audit logs
• Enumerate SharePoint sites
• Discover sensitive documents and emails

For comprehensive testing, your token should include:

High-Privilege Scopes:

• User.ReadWrite.All - User manipulation
• Group.ReadWrite.All - Group operations
• Directory.ReadWrite.All - Directory modifications
• Application.ReadWrite.All - App registration control
• RoleManagement.ReadWrite.Directory - Role assignments

Read-Only Scopes (for safer testing):

• User.Read.All
• Group.Read.All
• Directory.Read.All
• AuditLog.Read.All

Create a .env file:

⚠️ IMPORTANT: AUTHORIZED USE ONLY

This framework is designed for:

• Authorized penetration testing
• Red team exercises with proper authorization
• Security research in controlled environments
• Educational purposes

DO NOT use this tool against:

• Systems you don't own
• Environments without explicit written permission
• Production systems without proper change control
• Any unauthorized targets

All operations are logged. You are responsible for your actions.

• AI/ML: OpenAI GPT-4 for strategic planning
• Framework: CrewAI for multi-agent orchestration
• Graph API: Microsoft Graph REST API v1.0
• Authentication: OAuth 2.0 Bearer tokens
• Language: Python 3.8+

• Support for Microsoft Graph Beta endpoints
• Integration with MITRE ATT&CK framework
• Enhanced stealth and evasion techniques
• Custom attack scenario templates
• Integration with SIEM detection testing
• Multi-tenant attack simulation
• Automated report generation

Contributions are welcome! Please follow these guidelines:

1. Fork the repository
2. Create a feature branch (git checkout -b feature/improvement)
3. Commit your changes (git commit -m 'Add new feature')
4. Push to the branch (git push origin feature/improvement)
5. Open a Pull Request

Token Expired

Permission Denied

OpenAI API Errors

• Verify your API key is valid
• Check you have GPT-4 access
• Ensure sufficient API credits

This project is licensed under the MIT License - see the LICENSE file for details.

This tool is provided for educational and authorized security testing purposes only. The authors and contributors are not responsible for any misuse or damage caused by this tool. Always obtain proper authorization before testing any systems.

Microsoft Graph API, Graph API security testing, Azure AD penetration testing, Microsoft 365 red team, OAuth security testing, AI-powered penetration testing, GPT-4 security tools, autonomous security agents, Graph API exploitation, Azure security assessment, M365 security testing, privilege escalation Microsoft Graph, AI red team tools, Microsoft security research

Developed by SecureLayer7 | Website | GitHub