Illicit Consent skills
Free agent skills tagged illicit consent, ready to install into any SKILL.md-compatible agent.
2 skills
Detecting Suspicious OAuth Consent
mukul975
Identify risky OAuth application consent grants in Azure AD.
Security & ComplianceintermediatePython27.6k repo
Attacking OAuth with Device-Code Phishing
Run OAuth 2.0 device-code and illicit-consent phishing attacks against Microsoft Entra ID, using TokenTactics-style tooling to steal access and refresh tokens, bypass MFA, and pivot across Microsoft 365 services. Use for authorized red-team engagements simulating device-code or consent-grant phishing against a tenant you have explicit written permission to test.