Bypass Microsoft Entra ID (prev. Azure Active Directory) restrictions and do everything you are allowed to do on CLI but on the UI.

Latest Version

Version
1.0
Update
January 24, 2024
Size
45.19KiB
Developer
www.harckade.com
Category
Users
33
Rating
0 ★
Manifest Version
3
Web Store Status
Languages Support
English
See more
Permissions
Storage
Tabs
Debugger
See more

Entra ID Master Key (EIDMK) Extension

EIDMK allows you to bypass Azure and Microsoft Entra ID portal UI restrictions by tricking your client (web browser) to send (legit and allowed by Microsoft) requests to Microsoft endpoints and thus receiving information that, usually, you would not be allowed to access through UI - but you are 100% allowed by Microsoft to access through CLI, Graph API, PowerShell or any other application/method - which is the case of this extension. Meaning that in fact this is not a bypass, but just another way to retrieve data that you ALREADY have access to. Keep in mind that you do not gain any new permissions by using this extension. Your user keeps exactly same roles, privileges and permissions - as documented here: https://learn.microsoft.com/en-us/entra/fundamentals/users-default-permissions

If you are responsible for managing an Entra ID tentant remember that \"Using the Restrict access to Microsoft Entra administration portal switch is NOT a security measure.\"(https://learn.microsoft.com/en-us/entra/fundamentals/users-default-permissions#restrict-member-users-default-permissions).

It works similar to AzureHound by BloodHoundAD, except you don't need to use a terminal for this and can run it directly on your Google Chrome.

In fact, even Microsoft official documentation states that the UI restriction does not restrict anyone, who has access to a tenant, from retrieving the information from Entra ID - find out more on this article, which was written after reporting to Microsoft a strange UI behaviour on Azure portal: https://www.linkedin.com/pulse/microsoft-azure-active-directory-authorization-bypass-vlad-yultyyev/.

This extension may be handy if you are a security professional who needs a quick solution to analyze Microsoft Entra ID tenant.

You need to be a user of particular tenant to view the content of that tenant.

What can you expect to access using this extension?
- Exactly same features/information that you can access through Graph API, CLI or PowerShell
- List all groups that exist on the tenant
- List all users and retrieve their information
- List Application Registrations (names, URI, exposed APIs, roles, secret IDs, etc)
- List Enterprise applications
- List devices (names, operating system version, etc)
- Create new tenants (an active Azure subscription is required for this action. Depending on your organization settings, only Azure AD B2C tenants may be allowed)
Read more

Source Manifest.json

{"update_url": "https://clients2.google.com/service/update2/crx", "name": "Entra ID Master Key (EIDMK)", "version": "1.0", "description": "Bypass Microsoft Entra ID (prev. Azure Active Directory) restrictions and do everything you are allowed to do on CLI but on the UI.", "manifest_version": 3, "permissions": ["storage", "tabs", "debugger"], "host_permissions": ["*://graph.microsoft.com/*", "*://main.iam.ad.ext.azure.com/*"], "background": { "service_worker": "background.js" }, "action": {"default_icon": "icon.png","default_title": "EIDMK","default_popup": "popup.html" }, "icons": { "16": "icon16.png", "32": "icon32.png", "48": "icon48.png", "128": "icon128.png" }}
Read more

How to download and manually install Entra ID Master Key (EIDMK) extension for Chrome

Looking for a way to install Entra ID Master Key (EIDMK) extensions for Chrome, you can search for them in the Chrome Web Store, clicking the "Add to Chrome" button, and following the straightforward process.

However, you may need to install Entra ID Master Key (EIDMK) extensions manually, this article outlines two simple methods to effortlessly install Entra ID Master Key (EIDMK) extensions, whether they come as unpacked folders in compressed formats like .zip or as .crx files.

Method 1: Download Entra ID Master Key (EIDMK) extension and manually install through Drag &Drop

If you ever need to manually install a Entra ID Master Key (EIDMK) extension for Chrome, don't worry, it's a simple process. Just follow these easy steps, and you will have your extension ready to use in no time.

Step 1: Download the Entra ID Master Key (EIDMK) Extension by clicking the "Download CRX" button on the website.

Look for the Entra ID Master Key (EIDMK) extension you wish to install. Go to the website and download the Entra ID Master Key (EIDMK) extension package, which is usually a .CRX file and comes in a zipped file. Here ".crx" file is the format for Entra ID Master Key (EIDMK) extension that contains all the data.

Step 2: Extract &Arrange Files

Once the file is downloaded, extract that file into its own folder. Similarly, give that extension files a permanent home. In other words, keep it in a folder that you don't accidentally delete it because these files will be needed to make that extension work.

Step 3: Go to the Chrome Extensions Page

Open Google Chrome and in the address bar, type chrome://extensions; it will open the Google Chrome extensions page. Make sure that "My extensions" is selected in the sidebar.

Step 4: Drag and Drop the Extension

Now, go to the folder where you extracted the Entra ID Master Key (EIDMK) extension and drag &drop the extension file from there anywhere onto the extension page within Google Chrome.

Step 5: Complete the Installation

Once you drag and drop the extension file, follow the steps that Google Chrome takes you through. Similarly, if the extension file is of .crx file format, you will be required to review the permissions and then add the extension.

Now, you can manage that added extension as you would like to with any other Chrome extension that you added through Chrome Webstore. Its icon will also appear in the Google Chrome Menu on the right side of the address bar once you activate it.

Method 2: Download Entra ID Master Key (EIDMK) extension for Chrome and install in Developer Mode

This is another method to install Entra ID Master Key (EIDMK) extension manually, but the twist is that here, you install by enabling the developer mode option provided in Google Chrome. This mode is commonly used for testing extensions or running unpublished tools.

Step 1: Download the Entra ID Master Key (EIDMK) extension file

Select and download the Entra ID Master Key (EIDMK) extension by clicking the 'Download CRX' button on the website.

Step 2: Extract the downloaded contents

Convert the file to a ZIP file if it is in CRX format then extract the Entra ID Master Key (EIDMK) extension zip file or folder that you downloaded. Make sure you extract it using the same folder name and keep it safely in another folder, so you don't delete it by mistake. The extracted folder will be needed to keep your Entra ID Master Key (EIDMK) extension running.

Step 3: Open Chrome Extension Setting Page

In the address bar of Google Chrome, type chrome://extensions and open the Chrome Extension Page.

Step 4: Enable Developer Mode

After opening the Chrome Extension page, look at the top right side, and you will find the toggle option of "Developer mode."Simply enable that developer mode option.

Step 5: Load the Unpacked Extension

Once you enable the developer mode option, you will see the menu of Load Unpacked, Pack Extensions and Update. From that, select the option "Load unpacked."

Step 6: Select the Extension Folder

Once the pop-up opens upon clicking Load unpacked, select the Entra ID Master Key (EIDMK) extension directory and click on the "Select Folder "button.

Step 7: Confirm and Install

After you select an extension folder of a Google Chrome extension you're installing manually, confirm its installation for the final time and let the installation complete.

Conclusion

Here we've made a step-by-step guide on How to manually install Entra ID Master Key (EIDMK) extension in 2 ways. We hope this guide proves helpful.

Similar Extensions

icon

AIPRM for Claude Extension · Productivity 33 9 ★ 296KiB

icon

Multi AI Sidebar Extension · Productivity 33 5 ★ 2.23MiB

icon

ExpressVPN Keys: Password Manager Extension · Productivity 33 90 ★ 10.99MiB

icon

Salesforce Toolkit Extension · Productivity 33 5 ★ 33.37MiB

icon

Table Browser Caller for D365FO Extension · Developer Tools 33 4 ★ 590KiB

icon

Graph X-Ray Extension · Developer Tools 33 7 ★ 5.94MiB

icon

Proton Pass: Free Password Manager Extension · Productivity 33 1404 ★ 7.2MiB

icon

CaptchaAI - Captcha Solver Extension · Accessibility 33 22 ★ 460KiB

icon

iDoperation Client Extension Extension · Productivity 33 0 ★ 57.87KiB

icon

Surereach: Find verified Mobile No. & Emails Extension · Productivity 33 9 ★ 858KiB

icon

IG Username to ID Extension · Productivity 33 9 ★ 72.97KiB

icon

Qodo Merge: AI-Powered Code Reviews & Chat Extension · Developer Tools 33 32 ★ 389KiB

icon

Authenticator App Extension · Productivity 33 9 ★ 3.12MiB

icon

Chrome Extension Manager by cloudHQ Extension · Productivity 33 154 ★ 275KiB

icon

IT Glue Chrome Extension Extension · Productivity 33 59 ★ 3.44MiB

icon

Add to Microsoft To Do Extension · Productivity 33 84 ★ 699KiB

icon

Saved passwords Extension · Productivity 33 6 ★ 213KiB

icon

Orian (Ollama WebUI) Extension · Developer Tools 33 16 ★ 11.18MiB

icon

Token Devtools Inspector Extension · Developer Tools 33 1 ★ 91.73KiB

icon

Passwarden by KeepSolid – Password Manager Extension · Productivity 33 16 ★ 10.1MiB

icon

LikeFox - Export IG Likes (Email) Extension · Productivity 33 0 ★ 784KiB

icon

AI Block Extension · Productivity 33 1 ★ 142KiB

icon

Private Notes Extension · Productivity 33 14 ★ 2.32MiB

icon

TUAT Autofill Extension Extension · Productivity 33 3 ★ 162KiB