From 87267c6de0672574b27b2026ecddeec0b9721ce6 Mon Sep 17 00:00:00 2001 From: AvishaiEZen <152059625+AvishaiEZen@users.noreply.github.com> Date: Sun, 21 Dec 2025 14:00:12 +0200 Subject: [PATCH 1/2] minor readme update --- readme.md | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/readme.md b/readme.md index bce87c5..c8ec9df 100644 --- a/readme.md +++ b/readme.md @@ -30,9 +30,13 @@ Power Pwn is an offensive and defensive security toolset for Microsoft 365 Power **Key Features, among others:** - 💾 **PowerDump**: Comprehensive tenant scanning and data collection -- 🔍 **Copilot Studio Hunter**: Discover and test misconfigured Copilot Studio bots exposed to unauthenticated users -- 🤖 **Custom GPT Hunter**: Enumerate and analyze custom GPTs and agent builders -- 🔎 **LLM Hound**: Discover publicly exposed AI agents across the internet using Shodan +- 🚪 **BackDoor**: Deploy backdoor flows for persistent access to Power Platform environments +- 🦠 **NoCodeMalware**: Create and deploy malicious Power Platform artifacts without writing code +- 🎣 **PowerPhishing**: Abuse Power Platform for phishing campaigns and credential harvesting +- 🤖 **Copilot Studio Hunter**: Discover and test misconfigured Copilot Studio bots exposed to unauthenticated users +- 🤖 **Custom GPT Hunter**: Enumerate and analyze custom GPTs +- 🤖 **Agent Builder Hunter**: Discover publicly available Agent Builder deployment and enumerate their capabilities +- 🔎 **LLM Hound**: Discover publicly exposed MCPs & AI middleware across the internet using Shodan - 🎯 **Copilot M365**: Test Microsoft 365 Copilot for unauthorized data retrieval - 📄 **Power Pages**: Identify misconfigured Power Pages that leak Dataverse tables From bde3c2fae50f34c59bd97691a79cd14aea2e7035 Mon Sep 17 00:00:00 2001 From: AvishaiEZen <152059625+AvishaiEZen@users.noreply.github.com> Date: Sun, 21 Dec 2025 17:31:02 +0200 Subject: [PATCH 2/2] fix text --- readme.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/readme.md b/readme.md index c8ec9df..778b7b1 100644 --- a/readme.md +++ b/readme.md @@ -35,7 +35,7 @@ Power Pwn is an offensive and defensive security toolset for Microsoft 365 Power - 🎣 **PowerPhishing**: Abuse Power Platform for phishing campaigns and credential harvesting - 🤖 **Copilot Studio Hunter**: Discover and test misconfigured Copilot Studio bots exposed to unauthenticated users - 🤖 **Custom GPT Hunter**: Enumerate and analyze custom GPTs -- 🤖 **Agent Builder Hunter**: Discover publicly available Agent Builder deployment and enumerate their capabilities +- 🤖 **Agent Builder Hunter**: Discover publicly available Agent Builder deployments and enumerate their capabilities - 🔎 **LLM Hound**: Discover publicly exposed MCPs & AI middleware across the internet using Shodan - 🎯 **Copilot M365**: Test Microsoft 365 Copilot for unauthorized data retrieval - 📄 **Power Pages**: Identify misconfigured Power Pages that leak Dataverse tables