Python toolkit for authorized Microsoft Entra ID password-spray assessments using Azure API Management gateways. It creates gateway resources and sends ROPC token requests in spray (1:N) or validation (1:1) mode; an optional helper builds candidate UPNs from a public service-account username list and the supplied target domain. Current source hard-codes an ROPC /common endpoint that Microsoft documents as unsupported, and the helper does not parse azmap.dev's current related_domains response field.
Python
RESTRICTED_ACCESS_BLUR_MARKER