GraphSpy
GraphSpy is a browser-based post-exploitation tool for Azure Active Directory and Office 365 environments that enables token management, reconnaissance, and interaction with Microsoft 365 services.
Free1,176
Free1,176
GraphSpy
GraphSpy is a browser-based post-exploitation tool for Azure Active Directory and Office 365 environments that enables token management, reconnaissance, and interaction with Microsoft 365 services.
Data verified May 2026
ADYour product here. Reach security decision-makers.Launch a campaignGraphSpy Description
GraphSpy is a browser-based post-exploitation tool designed for Azure Active Directory and Office 365 environments. The tool provides security professionals with capabilities to manage access tokens, perform reconnaissance, and interact with Microsoft 365 services after gaining initial access to target systems. The tool offers comprehensive token management functionality, allowing users to store and manage access and refresh tokens for multiple users and scopes. It supports device code authentication flows and provides capabilities to manipulate multi-factor authentication methods for maintaining persistence in compromised environments. GraphSpy includes several modules for post-exploitation activities across Microsoft 365 services. The file access module enables interaction with OneDrive and SharePoint, providing download and upload capabilities for document manipulation. Email functionality allows access and manipulation through Outlook using either direct web access or Graph API integration. The tool supports Microsoft Teams message reading and sending, Graph API searching across Microsoft 365 applications, and custom API request capabilities with template storage for repeated operations. It includes Entra ID user enumeration features for gathering detailed user information during reconnaissance phases. GraphSpy operates as a local web application accessible through standard web browsers, supporting both light and dark modes for user preference. The tool can be installed via pipx and functions across multiple operating systems, with primary testing conducted on Linux and Windows platforms. It supports multiple database configurations to organize tokens and device codes for different assessment engagements.
GraphSpy FAQ
Common questions about GraphSpy including features, pricing, alternatives, and user reviews.
GraphSpy is GraphSpy is a browser-based post-exploitation tool for Azure Active Directory and Office 365 environments that enables token management, reconnaissance, and interaction with Microsoft 365 services. It is a Security Operations solution designed to help security teams with Post Exploitation, Azure, Reconnaissance.
GraphSpy is a free Security Operations tool. This makes it accessible for organizations of all sizes, from startups to enterprises. Visit https://github.com/RedByte1337/GraphSpy/ for download and installation instructions.
Popular alternatives to GraphSpy include:
1.CloudCopy - CloudCopy implements a cloud version of the Shadow Copy attack to extract domain user hashes from AWS-hosted domain controllers by creating and mounting volume snapshots. (Free)
2.Fortra Cobalt Strike - Threat emulation tool for adversary simulations and red team operations (Commercial)
3.Black Hills Information Security DNS Triage - DNS reconnaissance tool checking DNS records, subdomains, and third-party svcs (Commercial)
4.Core Security Cobalt Strike - Post-exploitation threat emulation platform for red team operations. (Commercial)
5.Core Security Outflank Security Tooling - Red team toolkit for EDR evasion, initial access, and post-exploitation. (Commercial)
Compare these tools and more at https://cybersectools.com/categories/security-operations
GraphSpy is for security teams and organizations that need Post Exploitation, Azure, Reconnaissance, Office 365, Microsoft 365. It's particularly suitable for small to medium-sized teams looking for cost-effective solutions. Other Security Operations tools can be found at https://cybersectools.com/categories/security-operations
Have more questions? Browse our categories or search for specific tools.
