Loading…

Andrax Pentester

Cybersecurity research, education, and tooling

All Systems Operational · Research Verified

Security Dispatches

Get notified when new 0-day disclosures and CTF writeups publish.

Email for newsletter

Intelligence

Articles
Research
Writeups
Tutorials
Security Tools
Resources
Learn
Labs

MCP Security

MCP Scanner
Server Directory
MCP Dorks Search
Browser Extension
Hardening Lab
Methodology
Scanning Policy
State of MCP
Developer API

Discovery

Search Index
Categories
Vulnerability Tags
RSS XML Feed
JSON API Feed
LLMs Knowledge (llms.txt)

Organization

About Project
Lead Researcher
SentinelReign
Platform Roadmap
Indian Armed Forces Tribute

Access

Apply as Researcher
Member Sign In
Create Account
Research Dashboard

Independent Security Network

Andrax Pentester operates as an autonomous cybersecurity laboratory under the SentinelReign research umbrella.

sentinelreign.com Our Mission

Strict Ethical Guidelines · Educational Purpose Only

Microsoft 365 — Andrax Pentester

Tag

Microsoft 365

Published work tagged Microsoft 365.

Items1

All Categories Articles Tutorials Research Writeups

ArticleCloud Security

How to Audit Microsoft 365 OAuth Apps and Service Principals (After the ConnectWise Breach)

A stolen vendor app secret skips MFA. Check service principal sign-ins, app credentials and role grants in Entra ID, disable risky apps, and tighten consent bef…

Syed Zada Abrar · 9 min