Run OAuth 2.0 device-code and illicit-consent phishing attacks against Microsoft Entra ID, using TokenTactics-style tooling to steal access and refresh tokens, bypass MFA, and pivot across Microsoft 365 services. Use for authorized red-team engagements simulating device-code or consent-grant phishing against a tenant you have explicit written permission to test.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill attacking-oauth-with-device-code-phishingnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill attacking-oauth-with-device-code-phishing -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill attacking-oauth-with-device-code-phishing -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/attacking-oauth-with-device-code-phishinggh skill install mukul975/Anthropic-Cybersecurity-Skills attacking-oauth-with-device-code-phishinggit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/attacking-oauth-with-device-code-phishing ~/.claude/skills/attacking-oauth-with-device-code-phishing # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/attacking-oauth-with-device-code-phishing ~/.agents/skills/attacking-oauth-with-device-code-phishing # Codex, Cursor, Gemini CLI, Copilot, OpenCode