A red teamer operating under the handle OtterHacker has publicly released M365Pwned, a pair of WinForms GUI tools designed to enumerate, search, and exfiltrate data from Microsoft 365 environments using application-level OAuth tokens without requiring any user interaction. Built entirely in PowerShell 5.1 and leveraging the Microsoft Graph API, the toolkit presents a significant post-compromise […] The post M365Pwned – Red Team GUI Toolkit for Microsoft 365 Exploitation via Graph API appeared first on Cyber Security News.