Top Tweets for #EvilMist
Master cloud security with EvilMist. Audit Entra ID, simulate attack paths, and identify MFA gaps with this powerful red teaming and penetration testing suite.
#EvilMist #CloudSecurity #RedTeaming #Azure #EntraID #Pentesting #MFA #Infosec #EthicalHacking
https://t.co/r2whmFLTmA
#EvilMist Invoke-EntraEnum - Unauthenticated Azure/Entra ID Enumeration
This release adds 12 new enumeration methods for Azure and Entra ID reconnaissance - all without requiring authentication.
#Highlights
- OneDrive User Enum
- Federation Metadata - Extract X.509 signing certs, ADFS detection, token endpoints
- Seamless SSO Detection - Find Autologon endpoints for undetectable enum
- Azure Subdomain Discovery - Auto-discover Blob Storage, Key Vaults, SQL, App Services, and 20+ Azure resources
- SharePoint/Teams Discovery - Enumerate tenant sites and public shares
- EWS & Autodiscover Probes - V1 + V2 endpoint enumeration
- Mail Security Analysis - Full DMARC, DKIM, MTA-STS, BIMI, TLS-RPT assessment
- OAuth App Probe - Discover accessible apps via error analysis
- Additional methods include: EWS endpoint probing, Lync discovery, and Tenant ID reversal.
All passive and unauthenticated. PowerShell 7+.
Part of the EvilMist toolkit: https://t.co/F7itV7yg0M
#cybersecurity #infosec #redteam #pentesting #azure #cloudsecurity #EntraID #AzureAD #offensive #Logisek
Massive #EvilMist Update: 13 New Azure & M365 Security Modules :)
What's #New:
#Microsoft #365 Security Coverage:
- Teams Check - Federation abuse, guest persistence, shadow IT detection, anonymous meeting risks
- Exchange Check - BEC attack vectors, inbox rule analysis, external forwarding, mailbox delegation audits
- SharePoint Check - External sharing analysis, anonymous links, permission sprawl
#Azure #Infrastructure Security:
- Key Vault Check - Secret exposure risks, network security, purge protection, access policy analysis
- Managed Identity Check - Privilege escalation paths, cross-subscription access, over-permissioned identities
- Storage Account Check - Public access detection, network security, encryption status
- Azure Attack Path Check - Cross-service attack paths (VM to Key Vault, cross-subscription pivots)
#Identity & #Governance:
- PIM Check - Just-In-Time access gaps, approval workflow analysis, permanent assignment detection
- Sign-In Risk Check - Identity Protection signal analysis, risky user enumeration, attack pattern detection
- OAuth Consent Check - Consent grant analysis, application permission review
- Network Security Check - Azure network configuration assessment
#Compliance & #Reporting:
- Compliance Check - Multi-framework assessment (CIS, NIST 800-53, SOC 2, ISO 27001, GDPR)
- Report Generator - Consolidated HTML executive dashboard with security scoring and trend analysis
Check it out: https://t.co/F7itV7yg0M
#CloudSecurity #Azure #Microsoft365 #RedTeam #BlueTeam #Pentesting #CyberSecurity #EntraID #AzureAD #InfoSec #Offsec #Logisek
EvilMist update!
New scripts have been added and the project now features a more modular, flexible structure for easier use.
Check it out 👉 https://t.co/tnhMtHEH7L
#EvilMist #RedTeam #OffensiveSecurity #Pentesting #OpenSource #Infosec #Offsec #PenTest #Cloud #Azure #Logisek
#EvilMist: An Open-Source Toolkit for Cloud Penetration Testing and Red Teaming
Cloud environments evolve fast, and so do the risks that come with identity-driven access, sprawling services, and complex permission models. EvilMist was built to make this space easier to explore, test, and secure.
---
🌫️ Introducing EvilMist
EvilMist is an open-source collection of scripts and utilities designed to support cloud penetration testing and red-team operations. It focuses on one core goal: giving security teams a structured, repeatable way to uncover misconfigurations, map privilege-escalation paths, and simulate attacker behavior across modern cloud stacks.
Instead of stitching together dozens of ad-hoc scripts or running cloud checks manually, EvilMist offers a unified approach that streamlines early recon through deeper attack-path modeling.
---
🧩 What EvilMist Brings
- Automated discovery of weak or overly permissive configurations.
- Enumeration routines built for cloud identity and access models.
- Privilege-escalation path mapping to understand how attackers might pivot.
- Simulated attack chains to validate real-world defensive coverage.
- Modular design so teams can extend or integrate it with their internal tooling.
Whether you’re performing an internal assessment, building your red-team playbooks, or validating cloud-hardening efforts, EvilMist is built to fit naturally into the workflow, no unnecessary complexity, no vendor lock-in. Just practical, open-source capability.
---
Why It Matters
#CloudSecurity isn’t just about knowing what’s deployed, it’s about understanding how identities, resources, and trust relationships interact. Many breaches still originate from simple misconfigurations or privilege paths no one knew existed.
EvilMist helps teams find those blind spots early. By providing reproducible testing patterns, it empowers both #offensive and #defensive practitioners to validate assumptions, verify least-privilege models, and harden cloud environments with confidence.
---
The project is open-source and available on GitHub: https://t.co/F7itV7yg0M
- https://t.co/thWuQ5nVnK
#CyberSecurity #RedTeam #PenTest #InfoSec #OffSec #CloudSecurity #OpenSource #CloudPentest #OffensiveSecurity #Logisek
Last Seen Hashtags on Sotwe
Trends for you
Most Popular Users
Elon Musk 
@elonmusk
240.4M followers
Barack Obama
@barackobama
119.3M followers
Donald J. Trump
@realdonaldtrump
111.7M followers
Cristiano Ronaldo
@cristiano
110M followers
Narendra Modi
@narendramodi
107M followers
Rihanna
@rihanna
97.5M followers
NASA
@nasa
92.1M followers
Justin Bieber
@justinbieber
90.8M followers
KATY PERRY
@katyperry
87.3M followers
Taylor Swift
@taylorswift13
81.2M followers
Lady Gaga
@ladygaga
72.7M followers
Kim Kardashian
@kimkardashian
69.6M followers
Virat Kohli
@imvkohli
69.4M followers
YouTube
@youtube
68.6M followers
Bill Gates
@billgates
63.7M followers
The Ellen Show
@theellenshow
62.5M followers
Neymar Jr
@neymarjr
62.1M followers
CNN
@cnn
61.9M followers
X
@x
60.9M followers
Selena Gomez
@selenagomez
60.4M followers