AW Tools Summary

Lists of all tools developed in-house. Initial access tools

• devicecode_skippy: An update to the device code phishing script, based on the technique to bypass the code entering stage.
• ConditionalSuccess: Brute force client ids against the graph API OAuth flow.
• loader-01: Visual Studio solution which takes a RAW shellcode without encryption and outputs a DLL ready to use in payloads. The solution is designed as a modular platform that allows quickly experimentation of new techniques.