TLDR Tech / InfoSec
EasyTokens (GitHub Repo)
EasyTokens is a Python/PHP adversary emulation tool that phishes Microsoft 365 OAuth tokens by abusing the Device Authorization Grant flow, presenting victims with a themed enrollment page while an operator dashboard polls for captured access and refresh tokens to query OneDrive and email via Microsoft Graph
Read the full story