TokenSmith — access and refresh token generator for Entra ID

A Go-based tool for obtaining access and refresh tokens for Entra ID (Azure AD). Allows authentication via the standard authcode flow and enables the use of retrieved tokens in popular Azure post-exploitation utilities. Useful in scenarios requiring minimal footprint and evasion of corporate access policies.

Features: • Entra ID token generation via authcode flow • Support for the --intune-bypass flag to bypass Intune Conditional Access • Customizable client_id, resource, redirect_uri and User-Agent

📎 Tool: https://github.com/JumpsecLabs/TokenSmith

💬 Discuss