Download

Skill UI

Browse and discover 11165+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search device-code-phishing , found 1 results

Default Newest Most Downloaded

Phishing OAuth Tokens via Device Code

attacking-oauth-with-device-code-phishing

mukul975/Anthropic-Cybersecurity-Skills

This skill simulates advanced red-teaming techniques targeting Microsoft Entra ID's OAuth 2.0 device-code flow and illicit consent mechanisms. It demonstrates how attackers can steal access and refresh tokens, bypass Multi-Factor Authentication (MFA), and pivot across various Microsoft 365 services. It is designed for authorized security testing to validate token protection and conditional access policies.

1

Language