Azure OSINT - a Cloudflare Worker that performs quick Azure Tenant OSINT on a domain

This is basically a less functional mirror of AAD Internals' OSINT page, but aims to do less, faster.

With this tool, you can get a high-level overview about an Azure Tenant:

• Tenant ID
• Associated domains
• Tenant region
• Tenant brand name

This tool does not do anything AAD Internals' OSINT page already does. In fact, it does less. It will not provide additional enrichment on associated domains, for example.

Because it does less, it's faster! Requesting microsoft.com will take roughly half the time (if not less!) with aad.kmtest.workers.dev compared to AAD Internals' OSINT page (at the time of testing, 2.6s vs 5.4s).

Benefits over AAD Internals' OSINT page:

• Faster
• Shareable reports (You can share a domain report like this: https://azure-osint.kmsec.uk/?domain=contoso.org)
• API can be accessed from any origin

Try it out!

Check out an example report for contoso.org

You can use the API at /api/. All you need to do is pass a domain parameter:

curl https://azure-osint.kmsec.uk/api/?domain=contoso.org

Response:

{
  "domain": "contoso.org",
  "brand": "Contoso For Good",
  "tenant_id": "fdd5b9d8-e5a3-462c-a4f4-085264aaf66b",
  "region": "NA",
  "domains": [
    "M365x391229.mail.onmicrosoft.com",
    "contoso.org",
    "M365x391229.onmicrosoft.com"
  ]
}