Python proof-of-concept post-exploitation tool for enrolling a fabricated device into Microsoft Entra ID and Intune. It supports device check-in, Intune compliance queries, retrieval of tenant-delivered configuration profiles and application/script payloads, and cleanup. In specific Hybrid Autopilot configurations, check-in can expose a domain-join computer credential; retrieved VPN clients or configurations may support follow-on access. It is not a command-and-control framework.
Python
RESTRICTED_ACCESS_BLUR_MARKER