jazzure 0.1.0__tar.gz

jazzure-0.1.0/LICENSE.md

@@ -0,0 +1,29 @@
+Copyright (c) 2026 JAZZURE
+
+Permission is hereby granted, free of charge, to any person or organization obtaining a copy of this software and associated documentation files (the "Software"), to use, copy, modify, merge, publish, and distribute the Software for personal, educational, research, internal business, and other non-commercial purposes, subject to the conditions set forth below.
+
+Commercial exploitation of the Software is prohibited without the prior written permission of the copyright holder.
+
+For the purposes of this License, "Commercial Exploitation" means:
+
+* Selling, licensing, sublicensing, or renting the Software;
+* Offering the Software as a paid product or service;
+* Including the Software in a product, service, or platform for which customers are charged;
+* Redistributing the Software as part of a commercial offering;
+* Using the Software to provide a paid hosted service where the Software constitutes a substantial part of the value provided to customers.
+
+The following activities do not constitute Commercial Exploitation and are therefore permitted:
+
+* Personal use;
+* Educational use;
+* Academic and scientific research;
+* Non-profit activities;
+* Internal evaluation, testing, development, or operational use by commercial organizations;
+* Modification of the Software for internal purposes;
+* Open-source contributions related to the Software.
+
+Redistributions of the Software must retain this copyright notice and license text.
+
+Any rights not expressly granted by this License are reserved by the copyright holder.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. IN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES, OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT, OR OTHERWISE, ARISING FROM, OUT OF, OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

jazzure-0.1.0/PKG-INFO

@@ -0,0 +1,97 @@
+Metadata-Version: 2.1
+Name: jazzure
+Version: 0.1.0
+Summary: Perform Azure recon
+Keywords: Azure,Microsoft,cloud,recon
+Author-Email: pasdoue <pasdoue@protonmail.com>
+Maintainer-Email: pasdoue <pasdoue@protonmail.com>
+Project-URL: Documentation, https://github.com/pasdoue/Jazzure/blob/main/README.md
+Project-URL: Repository, https://github.com/pasdoue/Jazzure
+Project-URL: Issues, https://github.com/pasdoue/Jazzure/issues
+Requires-Python: >=3.10
+Requires-Dist: R2Log~=1.0.2
+Requires-Dist: requests~=2.34.2
+Requires-Dist: bs4~=0.0.2
+Requires-Dist: jinja2~=3.1.6
+Requires-Dist: strip_ansi~=0.1.1
+Requires-Dist: docker>=7.2.0
+Description-Content-Type: text/markdown
+
+## General
+
+This tool is built to facilitate Azure/Entra environment discovery.  
+The philosophy of the tool is same as [Jawsome](https://github.com/pasdoue/Jawsome) (developped to brute force IAM permissions in AWS)    
+But due to complexity of Microsoft, this project is more complex to answer multiple problems and contains multiple submodules that works together.  
+
+## Installation
+
+### Pypi
+
+Perform git clone for now... I will release first package on Pypi when the tool will be "really" functional 😉  
+
+```bash
+pipx install jazzure
+```
+Then just call : ```jazzure -h```
+
+### Local run
+
+```bash
+git clone https://github.com/pasdoue/Jazzure.git
+python jazzure.py -h
+```
+
+## Technical details
+
+This tool is under heavy construction and documentation will follow.  
+Also as there are many things to handle, I decided to split documentation across modules/packages to avoid an unreadable README 🤪  
+
+### Azure & Entra details
+
+As there are several ways to connect to those environments, here is a "little" summarize : 
+
+| Method                                       | Identity                           |    User interaction        | Used with                       |
+| -------------------------------------------- | ---------------------------------- | -------------------------: | ------------------------------- |
+| **Interactive / Browser**                    | User                               |                        Yes | `az`, PowerShell, Graph         |
+| **Device Code**                              | User                               | Using web browser first    | `az`, Graph PowerShell, MSAL    |
+| **Authorization Code + PKCE**                | User                               |                        Yes | Web/Desktop/SPA                 |
+| **Access Token existant**                    | User or App                        |                        No  | `curl`, REST, PowerShell        |
+| **Client Secret**                            | Application                        |                        No  | `curl`, MSAL, scripts           |
+| **Certificate**                              | Application                        |                        No  | PowerShell, MSAL, automation    |
+| **Managed Identity**                         | Azure Resource / Service Principal |                        No  | VM, App Service, Function, etc. |
+| **Workload Identity / Federated Credential** | Workload                           |                        No  | CI/CD, Kubernetes, GitHub, etc. |
+| **OBO**                                      | User → Application → API           | No after first login       | APIs intermédiaires             |
+
+
+### Jazzure details
+
+#### Python Microsoft SDK
+
+This way of handling Microsoft features like I did for Jawsome was aborted, but left dead code as a reminder  
+More details here : [Python SDK details](jazzure/python_sdk/README.md)
+
+#### az CLI
+
+As the SDK is not suitable for performing introspection, I turned to azure CLI parsing.  
+Actually script take between 40min to 1h to parse all azure CLI options to generate JSON to be faster next times.
+More details here : [Azure CLI details](jazzure/az_cli/README.md)
+
+#### Powershell handler
+
+As a lot of commands & Entra connections are well handled in PowerShell and not in python SDK or even Azure CLI, it was necessary to support PowerShell ecosystem.  
+More details over here : [PowerShell details](jazzure/powershell/README.md)  
+
+```bash
+python jazzure.py docker --help
+```
+
+#### IMDS / Managed Identity
+
+This section is about when you're logged into a VM, so you can interrogate IMDS on `http://169.254.169.254/metadata`.    
+More details over here : [IMDS details](jazzure/imds/README.md)
+
+```bash
+python jazzure.py imds --help
+```
+
+

jazzure-0.1.0/README.md

@@ -0,0 +1,78 @@
+## General
+
+This tool is built to facilitate Azure/Entra environment discovery.  
+The philosophy of the tool is same as [Jawsome](https://github.com/pasdoue/Jawsome) (developped to brute force IAM permissions in AWS)    
+But due to complexity of Microsoft, this project is more complex to answer multiple problems and contains multiple submodules that works together.  
+
+## Installation
+
+### Pypi
+
+Perform git clone for now... I will release first package on Pypi when the tool will be "really" functional 😉  
+
+```bash
+pipx install jazzure
+```
+Then just call : ```jazzure -h```
+
+### Local run
+
+```bash
+git clone https://github.com/pasdoue/Jazzure.git
+python jazzure.py -h
+```
+
+## Technical details
+
+This tool is under heavy construction and documentation will follow.  
+Also as there are many things to handle, I decided to split documentation across modules/packages to avoid an unreadable README 🤪  
+
+### Azure & Entra details
+
+As there are several ways to connect to those environments, here is a "little" summarize : 
+
+| Method                                       | Identity                           |    User interaction        | Used with                       |
+| -------------------------------------------- | ---------------------------------- | -------------------------: | ------------------------------- |
+| **Interactive / Browser**                    | User                               |                        Yes | `az`, PowerShell, Graph         |
+| **Device Code**                              | User                               | Using web browser first    | `az`, Graph PowerShell, MSAL    |
+| **Authorization Code + PKCE**                | User                               |                        Yes | Web/Desktop/SPA                 |
+| **Access Token existant**                    | User or App                        |                        No  | `curl`, REST, PowerShell        |
+| **Client Secret**                            | Application                        |                        No  | `curl`, MSAL, scripts           |
+| **Certificate**                              | Application                        |                        No  | PowerShell, MSAL, automation    |
+| **Managed Identity**                         | Azure Resource / Service Principal |                        No  | VM, App Service, Function, etc. |
+| **Workload Identity / Federated Credential** | Workload                           |                        No  | CI/CD, Kubernetes, GitHub, etc. |
+| **OBO**                                      | User → Application → API           | No after first login       | APIs intermédiaires             |
+
+
+### Jazzure details
+
+#### Python Microsoft SDK
+
+This way of handling Microsoft features like I did for Jawsome was aborted, but left dead code as a reminder  
+More details here : [Python SDK details](jazzure/python_sdk/README.md)
+
+#### az CLI
+
+As the SDK is not suitable for performing introspection, I turned to azure CLI parsing.  
+Actually script take between 40min to 1h to parse all azure CLI options to generate JSON to be faster next times.
+More details here : [Azure CLI details](jazzure/az_cli/README.md)
+
+#### Powershell handler
+
+As a lot of commands & Entra connections are well handled in PowerShell and not in python SDK or even Azure CLI, it was necessary to support PowerShell ecosystem.  
+More details over here : [PowerShell details](jazzure/powershell/README.md)  
+
+```bash
+python jazzure.py docker --help
+```
+
+#### IMDS / Managed Identity
+
+This section is about when you're logged into a VM, so you can interrogate IMDS on `http://169.254.169.254/metadata`.    
+More details over here : [IMDS details](jazzure/imds/README.md)
+
+```bash
+python jazzure.py imds --help
+```
+
+

jazzure-0.1.0/jazzure/__init__.py

@@ -0,0 +1,3 @@
+from jazzure.config.ToolConfig import __version__
+
+__title__ = "jazzure"

jazzure-0.1.0/jazzure/__main__.py

@@ -0,0 +1,9 @@
+try:
+    from jazzure.main import main
+except ModuleNotFoundError as e:
+    print("Mandatory dependencies are missing:", e)
+    print("Please install them with pip3 install -r requirements.txt")
+    exit(1)
+
+if __name__ == "__main__":
+    exit(main())

jazzure-0.1.0/jazzure/assets/jazzure_terminal_detailed_clean.ansi

@@ -0,0 +1,20 @@
+▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
+▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
+▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
+▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
+▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
+▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
+▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
+▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
+▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
+▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
+▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
+▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
+▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
+▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
+▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
+▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
+▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
+▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
+▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
+▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀

jazzure-0.1.0/jazzure/az_cli/README.md

@@ -0,0 +1,55 @@
+# General information
+
+As python SDK is not suitable for Azure environment actions discovery, I decided to parse Azure CLI which is quite well when using CLI (but can trigger headache to parse it 😅)  
+The idea is to map every service and functions/actions we can interrogate to perform some upper discovery logic. 
+
+# Technical information
+
+## AZ CLI versions
+
+There are several version of this tool and some older ones can reveal more information.  
+So there is a function `azcli.AzCLI.retrieve_online_versions()` that can list every documented versions.  
+This is not used yet in the tool but in the future I will try to handle them.  
+
+## AZ CLI crawler
+
+The recon of all `az` has been done in version `2.90.0`.  
+The class `azcli.AzureCliCrawler` handles the parsing of `az`. It's quite long as we need to parse recursively all CLI possibilities with the `--help` arg.  
+The function `crawl()` is the main entrance of parsing and added some asyncio strategy to avoid long time running, even though it takes about 40min to complete 😅  
+A file in JSON format is created and contains every mapping of `az` commands with all information (see bellow a little extract):  
+```json
+{ "command": "az rest",
+      "subgroups": [],
+      "commands": [],
+      "arguments": [
+        {
+          "name": "--uri",
+          "aliases": [
+            "--url",
+            "-u"
+          ],
+          "required": true,
+          "special_mode": "",
+          "description": "Request URL. If it doesn't start with a host, CLI assumes it as an Azure resource ID and prefixes it with the ARM endpoint of the current cloud shown by `az cloud show --query endpoints.resourceManager`. Common token {subscriptionId} will be replaced with the current subscription ID specified by `az account set`."
+        },
+        {
+          "name": "--body",
+          "aliases": [
+            "-b"
+          ],
+          "required": false,
+          "special_mode": "",
+          "description": "Request body. Use @{file} to load from a file. For quoting issues in different terminals, see https://github.com/Azure/azure- cli/blob/dev/doc/use_cli_effectively.md#quoting-issues."
+        }
+        ]
+}
+```
+
+Technical bonus detail :  
+- While parsing the output I discovered that ANSI chars were dropped randomly in some help and caused my parsing to fails for no reason...
+- As it was quite painful some unit tests have been written to ensure good parsing of `az` inside `tests/test_AZCLI.py`
+
+
+
+
+