Update v1.0

mlcsec · mlcsec · commit 0b72525e186a · 2024-07-24T20:02:47.000+01:00
diff --git a/.github/getgraphtokens.png b/.github/getgraphtokens.png
diff --git a/Graphpython/__main__.py b/Graphpython/__main__.py
@@ -35,8 +35,8 @@ def parseArgs():
     parser.add_argument("--list-commands", action="store_true", help="List available commands")
     parser.add_argument("--token", help="Microsoft Graph access token or refresh token for FOCI abuse")
     parser.add_argument("--estsauthcookie", help="'ESTSAuth' or 'ESTSAuthPersistent' cookie")
-    parser.add_argument("--use-cae", action="store_true", help="Flag to use Continuous Access Evaluation (CAE) - add 'cp1' as client claim to get an access token valid for 24 hours")
-    parser.add_argument("--cert", help="X509Certificate path (.pfx)")
+    parser.add_argument("--use-cae", action="store_true", help="Flag to use Continuous Access Evaluation (CAE)")
+    parser.add_argument("--cert", help="X509Certificate path (.pfx, .crt, .pem, .cer)")
     parser.add_argument("--domain", help="Target domain")
     parser.add_argument("--tenant", help="Target tenant ID")
     parser.add_argument("--username", help="Username or file containing usernames (invoke-userenumerationasoutsider)")
diff --git a/Graphpython/commands/auth.py b/Graphpython/commands/auth.py
@@ -833,7 +833,7 @@ def invoke_refreshtosharepointtoken(args):
 # invoke-certtoaccesstoken
 def invoke_certtoaccesstoken(args):
     if not args.tenant or not args.cert or not args.id:
-        print_red("[-] Error: --tenant, --cert, and --id arguments are required for Invoke-CertToAccessToken command")
+        print_red("[-] Error: --tenant, --cert, and --id <appid> arguments are required for Invoke-CertToAccessToken command")
         return
 
     print_yellow("[*] Invoke-CertToAccessToken")
diff --git a/Graphpython/commands/exploit.py b/Graphpython/commands/exploit.py
@@ -563,7 +563,7 @@ def add_applicationcertificate(args):
 .crt
     """
     if not args.id or not args.cert:
-        print_red("[-] Error: --id and --cert required for Add-ApplicationCertificate command")
+        print_red("[-] Error: --id <appobjectid> and --cert required for Add-ApplicationCertificate command")
         print_red(openssl)
         return
     
