This blog explores techniques and tools for maximizing efficiency and information gathering during Azure and Microsoft 365 services penetration testing using Office and Microsoft 365 tokens obtained through phishing.

It demonstrates how to use tools such as Token Tactics v2, ROADrecon, and AADInt to extract basic information from Azure AD and Microsoft Teams and to bypass MFA restrictions.

It also covers how to use primary refresh tokens with roadtx to register a device, forge a PRT, and perform actions in Azure and Microsoft 365. The blog emphasizes the importance of deploying Hybrid Azure AD Join and getting a configuration review and cloud penetration test to minimize data exfiltration risks.