diff --git a/README.md b/README.md index 1487a1b..ba6d427 100644 --- a/README.md +++ b/README.md @@ -138,7 +138,7 @@ The script automatically queries the azmap.dev API for domain discovery. This us python3 entra-id-recon.py entra-external-recon -d example.com ``` -**How It Works**: The azmap.dev API uses an unauthenticated method that works cross-tenant. osint.aadinternals.com uses the same method but requires authentication only to prevent abuse - you can authenticate with ANY tenant (e.g., your own winternals.dev) and still query domains for other tenants (e.g., pentestpartners.com) because the underlying method is unauthenticated. +**How It Works**: The azmap.dev API uses an unauthenticated method that works cross-tenant. osint.aadinternals.com uses the same method but requires authentication only to prevent abuse - you can authenticate with ANY tenantand still query domains for other tenants (e.g., google.com) because the underlying method is unauthenticated. ##### Use MS Graph API with access token (for tenant metadata only) ```bash @@ -281,7 +281,7 @@ The enumeration command provides: - **How It Works**: - Uses an unauthenticated method that works cross-tenant - **osint.aadinternals.com uses the same underlying method** - it requires authentication only to prevent abuse/rate limiting, not because the method itself requires authentication - - You can authenticate to osint.aadinternals.com with ANY tenant (e.g., your own winternals.dev account) and still query domains for other tenants (e.g., pentestpartners.com) because the underlying method is unauthenticated + - You can authenticate to osint.aadinternals.com with ANY tenant and still query domains for other tenants (e.g., google.com) because the underlying method is unauthenticated - azmap.dev provides the same functionality without requiring authentication - **Advantages**: - No authentication required (unlike osint.aadinternals.com which requires login for abuse prevention)