☘️ { 𝔖𝔠𝔞𝔯𝔩𝔢𝔱𝔱𝔞'𝔰 𝔏𝔬𝔲𝔫𝔤𝔢 } ☘️

New channel link https://t.me/+aPqlpl-KXL82NDdi

Well, backup the channel guys.

🛡QR Code Generator (for Office) 🛡 Generate QR Codes by links for Letters. Only put link, right click -> save Image. Then go to https://base64.guru/converter/encode/image upload your image, select "Data URI -- data:content/type;base64" and copy the base64. On your letter, paste the following HTML code:

<img src="data:image/png;base64,..."> 

Means, you paste the data URI in the image tag. 🔗 Download : https://t.me/c/1154385673/12467

Now let's assign permissions to our Application 1️⃣Click on API permissions 2️⃣Click Add a permission 3️⃣Click on Microsoft Graph 4️⃣Click on Delegated permissions 5️⃣Search and select the below mentioned permissions and click on Add permission (This depends upon what permissions we want from the victim)

Contacts.Read 
Mail.Read
Mail.Send
Notes.Read.All
Mailboxsettings.ReadWrite
Files.ReadWrite.All 
User.ReadBasic.All

Most common are Contacts.Read and Mail.Read

Configure Application Let's create a new Client Secret for our application 1️⃣Click on Certificates & secrets 2️⃣Click on New client secret then enter the Description and click on Add. 3️⃣Save the secret's value somewhere in a safe place.

After registering the application we will be redirected to the app’s overview tab. Take a note of Application (client) ID

Register Application Follow the below mentioned steps to register an application in Azure 1️⃣Login to https://portal.azure.com 2️⃣Navigate to Azure Active Directory 3️⃣Click on App registrations 4️⃣Click New registration 5️⃣Enter the Name for our application (The same name will be displayed to the victim while granting consent) 6️⃣Under support account types select "Accounts in any organizational directory (Any Azure AD directory - Multitenant)" 7️⃣Enter the Redirect URL. This URL should be pointed towards our 365-Stealer application that we will host for hosting our phishing page. Make sure the endpoint is https://<DOMAIN/IP>:<PORT>/login/authorized. (or for tools it's different - f.e. the tool above use ms auth so use https://login.microsoftonline.com/<TENANT_ID>/oauth2/v2.0/token) 8️⃣Click Register

I am referring to the tutorial from 365 Stealer : https://www.alteredsecurity.com/post/introduction-to-365-stealer

Back it up https://mega.nz/folder/OcM0UKBR#BWkubMVjC0ssSNcPUZQn9g

Telegram messaged me because of the Maldev leak. I removed the post, if you need the file we can upload it on mega.nz

▶️Client Secret Expiration: Monitor the expiration date of the client secret and rotate it before it expires to avoid authentication failures. Create a new secret and update your script as needed. ▶️Redirect URI: Ensure the redirect URI (https://localhost/graph_login) is registered in the application’s Authentication settings in the Azure portal. If testing locally, you may need a local server to capture the authorization code, or manually copy it as in your first script. ▶️Multi-Tenant Applications: If your application needs to support multiple tenants, select Accounts in any organizational directory (Any Microsoft Entra ID tenant - Multitenant) during app registration, and use the common endpoint in the authority URL. ▶️Permissions Scope: The scope https://graph.microsoft.com/.default is appropriate for application permissions like Mail.Read. Ensure it matches the permissions configured in the Azure portal. ▶️Error Handling: Enhance the script with robust error handling for token acquisition and API requests, as demonstrated in the improved version of your first script. References Microsoft Learn: Get subscription and tenant IDs in the Azure portal Microsoft Learn: How to register an app in Microsoft Entra ID Microsoft Learn: How to find your tenant ID Microsoft Q&A: How to get client ID and client secret Ryan Spletzer: How to Get Your client_id and client_secret from Entra ID

Under the Client secrets tab, click New client secret. Provide a Description (e.g., "Graph API Secret") and select an expiration period (e.g., 6 months, 1 year, or custom). Note that shorter durations enhance security but require more frequent updates. Click Add to generate the secret. Copy the Client Secret: Immediately copy the Value of the client secret (e.g., DaZ8Q~mc5bUEobMjs3BTI5QnkvRQmbWXVscO7dzI) displayed under the Client secrets section. Store it securely (e.g., in a password manager or secure vault). Note: The secret value is only shown once and cannot be retrieved after navigating away from the page. If lost, you must create a new secret. ➡️ Configure API Permissions To access email data via the Microsoft Graph API, the application must have the appropriate permissions. Add Permissions: From the application’s Overview page, select API permissions from the left menu. Click Add a permission and select Microsoft Graph. Choose Application permissions (since your script uses the client credentials flow or refresh token flow for non-interactive access). Search for and select the Mail.Read permission to allow reading emails. Click Add permissions to save. Grant Admin Consent: Some permissions, including Mail.Read, require admin consent. Click Grant admin consent for and confirm by selecting Yes. Verify that the status for each permission shows Granted for . ➡️ Update the Script with Credentials Update your Python script with the obtained values: Replace client_id with the Application (client) ID from Step 2. Replace client_secret with the Value of the client secret from Step 3. Update the authority URL if using a specific tenant. For single-tenant applications, use https://login.microsoftonline.com/<tenant_id> instead of https://login.microsoftonline.com/common. Replace <tenant_id> with the Tenant ID from Step 1. Example:

client_id = "<your-client-id>"
client_secret = "<your-client-secret>"
authority = "https://login.microsoftonline.com/<your-tenant-id>"

➡️ Secure Storage of Credentials Avoid Hardcoding: Store sensitive data (client ID, client secret, tenant ID) in environment variables or a secure vault instead of hardcoding them in the script. Use a library like python-dotenv to load credentials from a .env file. Install python-dotenv: pip install python-dotenv. Create a .env file:CLIENT_ID=<your-client-id> CLIENT_SECRET=<your-client-secret> TENANT_ID=<your-tenant-id> Load in the script:from dotenv import load_dotenv import os load_dotenv() client_id = os.getenv("CLIENT_ID") client_secret = os.getenv("CLIENT_SECRET") authority = f"https://login.microsoftonline.com/{os.getenv('TENANT_ID')}" Secure the Refresh Token: The refresh_token.txt file should be stored in a secure location with restricted access, as it can be used to obtain new access tokens. ➡️ Test the Application Run the updated script to ensure it authenticates correctly and retrieves emails from the specified folder (e.g., Inbox, SentItems). If you encounter errors (e.g., AADSTS7000215: Invalid client secret), verify that the client secret is correct and has not expired. If the Mail.Read permission is not granted, revisit Step 4 to ensure admin consent is applied. ➡️ Additional Notes

🔥 Guide to Creating an Azure AD Tenant and Obtaining Client ID and Client Secret for Office Tools 🔥 This tutorial provides detailed instructions for creating a Microsoft Azure Active Directory (Azure AD, now Microsoft Entra ID) tenant, registering an application, and obtaining the client ID and client secret required for OAuth 2.0 authentication, such as for use with the Microsoft Graph API to access email data. ➡️ Prerequisites An active Microsoft Azure account. If you do not have one, create a free account at https://azure.microsoft.com/free/. Administrative access to the Azure portal or permissions to create tenants and register applications (e.g., Application Developer role). A web browser and access to the Azure portal (https://portal.azure.com). ➡️ Create an Azure AD Tenant An Azure AD tenant represents an organization and is required to manage applications and authentication. Sign in to the Azure Portal (usually through your office log): Navigate to https://portal.azure.com and sign in with your Azure account credentials. Access Microsoft Entra ID: In the Azure portal, search for "Microsoft Entra ID" in the top search bar and select it from the results. Alternatively, locate "Microsoft Entra ID" under the "Azure services" section on the portal homepage. Create a New Tenant: In the Microsoft Entra ID overview page, select Manage tenants from the top menu. Click Create to start the tenant creation process. Choose Microsoft Entra ID as the tenant type (not Microsoft Entra ID B2C unless specifically required for external user scenarios). Provide the following details: Organization name: Enter a meaningful name for your tenant (e.g., "MyOrganization"). Initial domain name: Specify a unique domain prefix (e.g., "myorg"). This creates a domain like myorg.onmicrosoft.com. Country/Region: Select the appropriate location for compliance and data residency. Click Review + create, verify the details, and then click Create. The tenant creation process may take a few minutes. Switch to the New Tenant: After creation, return to the Manage tenants page. Select the new tenant from the list to switch to it. Alternatively, use the Directories + subscriptions option in the portal toolbar to switch tenants. Record the Tenant ID: In the Microsoft Entra ID overview page for the new tenant, locate the Tenant ID under the Basic information section. Copy the Tenant ID (a UUID, e.g., 41d9edab-9ec4-432c-bc7f-2bf53ad99b7e) to a secure location, as it is required for authentication in your script. ➡️ Register an Application in Azure AD Registering an application creates the client ID and enables the generation of a client secret. Navigate to App Registrations: In the Azure portal, ensure you are in the correct tenant (switch if necessary). Search for "App registrations" in the top search bar or navigate to Microsoft Entra ID > App registrations. Create a New Application Registration: Click New registration. Enter the following details: Name: Provide a descriptive name (e.g., "GraphMailApp"). Supported account types: Select Accounts in this organizational directory only (Single tenant) for most scenarios, unless your application needs to support multiple tenants (e.g., for external users). Redirect URI: Enter https://localhost/graph_login (as used in your script) and set the type to Web. This URI must match the one used in your authentication flow. Click Register to create the application. Obtain the Client ID: After registration, the application’s Overview page is displayed. Locate the Application (client) ID (e.g., 60c26f6c-92de-4f9a-acfc-fbd124569560). Copy the Client ID to a secure location, as it is required in your script. ➡️ Generate a Client Secret The client secret is a secure key used for authentication in confidential client applications. Access Certificates & Secrets: From the application’s Overview page, select Certificates & secrets from the left menu. Create a New Client Secret:

😈

https://www.wdfi.org/apps/corpsearch/search.aspx Wyoming: https://wyobiz.wyo.gov/business/filingsearch.aspx EIN search method 2024 Let's clarify right away, approximately 33% of the total number of requests were found Be that as it may, in some cases this method can be very useful. Moreover, it is fast and free. Go to the website https://gocardless.com And click register:

Search for Business Information [2024] zoominfo.com - business data (field of activity, annual turnover), owner, some employees, simple registration buzzfile.com - a site similar to zoominfo Opencorporates.com - Information about large companies www.bizapedia.com - search for companies by name of the owner / address www.corporationwiki.com - analogue of Bizapedia, can help you quickly and free to find a place of work Owner www.dnb.com / www.nav.com - Breakthrough business in CS / CR https://www.census.gov/naics / - A site for choosing a type of activity by NaICS (can be found on Zoominfo/BuzzFiles). Local sites that will help determine the name of the company / owner, sometimes you can find EIN, you can also get tax documents requested during registration, depending on the state legislation: Alabama: https://www.sos.alabama.gov/govenment-Rucords/business-entity-regords Alaska: https://www.commerce.alaska.gov/cbp/main/search/entites Arizona: https://ecorp.azzcc.gov/entitySearch/index Arkansas: https://www.ark.org/corp-search/index.php California: https://bizfileonline.sos.ca.gov/search/business Colorado: https://www.sos.state.co.us/biz/businessentitycriteriaext.do? Russiaettranstyp=y Connecticut: https://service.ct.gov/business/s/onlinebusinessearch?language=en_us Delaware: https://icis.corp.delaware.gov/ecorp/entitySearch/namesearch.aspx District of Columbia (You Need to Register on the Website): https://corponline.dcra.dc.gov/home.aspx/landing Florida: https://search.sunbiz.org/inquury/corporationsearch/byname Georgia: https://ecorp.sos.ga.gov/businesssearch Hawaii: https://hbe.ehawaiii.gov/documents/search.html Idaho: https://sosbiz.idaho.gov/search/business Illinois: https://apps.ilsos.gov/businessentitySearch/ Indiana: https://bsd.sos.in.gov/publicbusinessesearch Iowa: https://sos.iowa.gov/search/business/search.aspx Kansas: https://www.kansas.gov/bess Kentucy: https://web.sos.ky.gov/bussearchnprofile/search Louisiana: https://coraweb.sos.la.gov/commercialsearch/commercialsearch.aspx Maine: https://apps1.web.main.gov/nei-sos-icrs/icrs?mainpage=x Maryland: https://egov.maryland.gov/businesspress/entitySearch Massachusetts: https://corp.sec.state.m.us/corpweb/corpsearch/corpsearch.aspx Michigan: https://cofs.lara.state.mi.us/searchapi/search/search Minnesota: https://mblsportal.sos.state.mn.us/business/search Mississippi: https://corp.sos.ms.gov/corp/portal/c/page/corpbusinessidsearch/portal.aspx?#clear=1 Missouri: https://bsd.sos.mo.gov/businessentity/besearch.aspx?searchtype=0 Montana: https://biz.sosmt.gov/search/business Nebraska: https://wwww.nebraska.gov/sos/corp/corpsearch.cgi?nav=search Nevada: https://esos.nv.gov/entitySearch/onlineentitySearch New Hampshire: https://quickstart.sos.nh.gov/online/businessinquire New Jersey: https://www.njportal.com/dor/businessnamearch/search/businessname New Mexico: https://portal.sos.state.nm.us/bfs/online/corporationbusinessearch New York: https://apps.dos.ny.gov/publicinquury/ North Carolina: https://www.sosnc.gov/search/index/corp North Dakota: https://firststop.sos.nd.gov/search/business Ohio: https://businessearch.ohiosos.gov/ Oklahoma: https://www.sos.ok.gov/corp/corpinquuryfind.aspx Oregon: https://egov.sos.state.or.us/br/pkg_web_name_srch_inq.login Pennsylvania: https://file.dos.pa.gov/search/business Rhode Island: https://business.sos.ri.gov/corpweb/corpsearch/corpsearch.aspx South Carolina: https://businessfilings.sc.gov/businessFiling/entity/search South Dakota: https://sossenterprise.sd.gov/businessservices/business/filingSearch.aspx Tennesee: https://tnbear.tn.gov/ecommerce/filingSearch.aspx Texas: https://mycpa.cpa.state.tx.us/coa/ UTAH: https://secure.utah.gov/bes/index.html Vermont: https://bizfilings.wermont.gov/online/businessinquire/ Virginia: https://cis.scc.virginia.gov/entitySearch/index Washington: https://ccfs.sos.wa.gov/#/advancedSearch West Virginia: https://apps.wv.gov/sos/businessentitySearch/ WisConsin: