Home

Welcome to the GraphRunner wiki!

GraphRunner is a toolkit for working with a Microsoft Azure account. It contains various tools for accessing and manipulating data within a tenant and user account.

---

There are three separate parts to GraphRunner:

GraphRunner.ps1

A PowerShell script containing a number of modules regarding post-compromise recon, persistence, and pillaging of an account.

GraphRunnerGUI.html

An HTML graphic user interface to be used with an access token. Provides various modules around enumeration and pillaging data from services such as Outlook, SharePoint, OneDrive, and Teams.

PHPRedirector

A basic PHP script that can be used to capture OAuth authorization codes during an OAuth consent flow.