An extensible Rust
-based exploitation framework designed to assist red teamers and security professionals in assessing AzureAD
environments.
RAADEF
aims at streamlining and simplifying the process of auditing/attacking AzureAD
environments.
Rust
was selected as programming language for RAADEF
due to its great performance, tooling, and active community.
Currently, RAADEF
is limited to this set of features. Having said that, ideally, this framework will grow and embed additional features and attack vectors thanks to the community contributions - special focus on the roadmap.
- Fine-tuning of attacks via the many
CLI switches
available: 🔍- Mechanisms to help preventing accounts lockout, e.g.,
--loop-number
,--loop-delay
,--loop-jitter
. - Mechanisms to help evading Smart Lockout, e.g.,
--delay
,jitter
,--proxy
.
- Mechanisms to help preventing accounts lockout, e.g.,
- Password brute forcing, i.e., iterate through
usernames
thenpasswords
. 💪 - Password spraying, i.e., iterate through
passwords
thenusernames
. 💦 - Support for
HTTP/2
for better performance. 🐇 - Support for custom authentication endpoints -> works amazingly with FireProx. 🤩
- Beautify the
console
/file
output (e.g.,progress bar
,colors
, silencereqwest
). - Implement
pause
andresume
options! 🤩 -
Implement support for additional authentication endpoints. - Implement support for cycling through
resource principals
. - Implement support for lockout detection ->
lockout
andforce
flags. -
Implement support for requestsdelay
. -
Improve the logic around the endpointHashMap
/CLI parser
, e.g., try to get away with using thepub enum Resource
and fetch options direcly from theHashMap keys
instead. -
Restructure the code -> more modularity por favor! 🌯
-
Clone/download the repository:
git clone https://github.com/aress31/raadef cd raadef
-
Compile/run
raadef
with:cargo build --release .\target\release\raadef.exe
cargo run --
.\target\release\raadef.exe --help
If you want to support this project and appreciate the time invested in developping, maintening and extending it; consider donating toward my next (cup of coffee ☕/lamborghini 🚗) - as a lot of my personal time went into creating this project. 😪
It is easy, all you got to do is press the Sponsor
button at the top of this page or alternatively click this link. 😁
Found a bug 🐛? I would love to squash it!
Please report all issues on the GitHub issues tracker.
You would like to contribute to better this project? 🤩
Please submit all PRs
on the GitHub pull requests tracker.
Give to Caesar what belongs to Caesar:
RAADEF
is primarily distributed under the terms of the Apache License (Version 2.0)
.
See LICENSE for details.