> For the complete documentation index, see [llms.txt](https://notes.incendium.rocks/pentesting-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.incendium.rocks/pentesting-notes/cloud/azure/authenticated-enumeration/roadtools.md).

# ROADTools

ROADTools is a tool for enumerating Entra ID environments. It uses different version of API's that provides more information (AADGraph 1.61-internal). Enumeration using RoadRecon includes three steps:

* Authentication
* Data Gathering
* Data Exploration

### Authenticate

We can activate a Python virtual environment to use ROADTools

```powershell
PS C:\Windows\system32> cd C:\AzAD\Tools\ROADTools\
PS C:\AzAD\Tools\ROADTools> .\venv\Scripts\activate
(venv) PS C:\AzAD\Tools\ROADTools> .\roadrecon\^C
(venv) PS C:\AzAD\Tools\ROADTools> roadrecon auth -u test@pp.onmicrosoft.com -p Password123!
Tokens were written to .roadtools_auth
```

Once authentication is done we can gather data

### Gather data

```powershell
roadrecon gather
```

This takes a while (depends if you have a big environment).

### Visualize data

We can use roadrecon to analyze the gathered information through a GUI. 

```
roadrecon gui
```

<figure><img src="/files/FQf0MH1gn3hoTUL3QVOP" alt=""><figcaption></figcaption></figure>

### Get conditional access policies

```
roadrecon plugin policies
```

This will write all conditional acccess information to a .html file