Azure OSINT

Gather some info about a particular Azure Tenant.

This is basically a less functional mirror of AAD Internals' OSINT page, but aims to do less, faster.

With this tool, you can get the Tenant ID, Branding (brand name, not logo), Region, and associated domains (without the enrichment that AADInternals does) for an Azure Tenant.

Because it does less, it's faster. Requesting microsoft.com will take roughly half the time (if not less!) with azure-osint.kmsec.uk compared to AAD Internals' OSINT page (at the time of testing, 2.6s vs 5.4s).

Retrieve Azure Tenant information for a domain

Submit a domain

Results

Submit a domain to see the API response.

Use this API

The API endpoint is at /api/, all you need to provide is a domain parameter

A fully constructed URL would look like this: https://azure-osint.kmsec.uk/api/?domain=contoso.org

About this site

This was built to provide a quicker and less verbose public API for Azure OSINT.

All information on how this works behind the scenes can be viewed on the Github repository, however all functionality is re-implemented from AADInternals so you're better off visiting AAD Internals's OSINT page or viewing the enumeration functions predominately found in AccessToken_utils.ps1 within AADInternals Suite.