Azure DevOps enumeration tool — projects, repositories, service connections, and more.

positional arguments:
  {projects,repos,service-endpoints,builds,build-logs,search-code,enumerate,permissions,whoami,pipeline-vars,pipeline-secrets,variable-groups,secure-files,approvals-checks,branch-policies,build-artifacts}
    projects            List projects in the organisation.
    repos               List git repositories in the organisation.
    service-endpoints   Enumerate service connections.
    builds              List builds for projects.
    build-logs          Download build logs.
    search-code         Search for code across repositories.
    enumerate           Enumerate current logged in user, repos, service connections, and projects.
    permissions         List groups, security namespaces, and ACL permissions.
    whoami              Identify the authenticated user and list their group memberships.
    pipeline-vars       List all variables defined in build pipelines.
    pipeline-secrets    List secret variable names defined in build pipelines.
    variable-groups     List variables defined in variable groups.
    secure-files        List secure files registered in projects.
    approvals-checks    Enumerate approvals and checks for protected pipeline resources.
    branch-policies     Enumerate branch policies for a repository.
    build-artifacts     List and download build artifacts.

options:
  -h, --help            show this help message and exit
  --org ORG             Azure DevOps organisation name (e.g. myorg)
  --pat PAT             Personal Access Token. If omitted, reads AZURE_DEVOPS_PAT or ADO_PAT environment variable.
  -k, --insecure        Disable TLS verification (useful with intercepting proxies).

pip install git+https://github.com/ReversecLabs/azuredevops-enum.git

git clone https://github.com/ReversecLabs/azuredevops-enum.git
cd ado-enum
pip install .

pip install -r requirements.txt
python ado_enum.py --help

export AZURE_DEVOPS_PAT=<your-pat>
# أو
export ADO_PAT=<your-pat>

ado-enum --org <ORG> [--pat <PAT>] [-k] <command> [options]

ado-enum --org myorg projects
ado-enum --org myorg projects --json

ado-enum --org myorg repos
ado-enum --org myorg repos --json

ado-enum --org myorg service-endpoints
ado-enum --org myorg service-endpoints --project "MyProject"
ado-enum --org myorg service-endpoints --json

ado-enum --org myorg builds
ado-enum --org myorg builds --project "MyProject"

# تنزيل جميع السجلات عبر جميع المشاريع
ado-enum --org myorg build-logs --output-dir ./logs

# تنزيل سجلات بناء معين
ado-enum --org myorg build-logs --project "MyProject" --build-id 42 --output-dir ./logs

ado-enum --org myorg search-code "password"
ado-enum --org myorg search-code "connectionString"

ado-enum --org myorg enumerate
ado-enum --org myorg enumerate --project "MyProject"

# قائمة بجميع المجموعات وأذونات ACL
ado-enum --org myorg permissions

# قائمة المجموعات المقتصرة على مشروع معين
ado-enum --org myorg permissions --project "MyProject"

# قائمة مجموعات مستوى المؤسسة فقط
ado-enum --org myorg permissions --org-level

# عرض المجموعات والأذونات لمستخدم معين
ado-enum --org myorg permissions --user "[email protected]"

# عرض الأذونات لمجموعة معينة
ado-enum --org myorg permissions --group "Project Administrators"

ado-enum --org myorg whoami

ado-enum --org myorg pipeline-vars
ado-enum --org myorg pipeline-vars --project "MyProject"
ado-enum --org myorg pipeline-vars --json

ado-enum --org myorg pipeline-secrets
ado-enum --org myorg pipeline-secrets --project "MyProject"
ado-enum --org myorg pipeline-secrets --json

ado-enum --org myorg variable-groups
ado-enum --org myorg variable-groups --project "MyProject"
ado-enum --org myorg variable-groups --json

ado-enum --org myorg secure-files
ado-enum --org myorg secure-files --project "MyProject"
ado-enum --org myorg secure-files --json

# تعداد جميع أنواع الموارد عبر جميع المشاريع
ado-enum --org myorg approvals-checks

# تعداد نوع محدد من الموارد
ado-enum --org myorg approvals-checks repositories
ado-enum --org myorg approvals-checks service-connections

# تقييد بمشروع معين
ado-enum --org myorg approvals-checks --project "MyProject"
ado-enum --org myorg approvals-checks environments --project "MyProject"

# مخرجات JSON
ado-enum --org myorg approvals-checks --json

# قائمة بجميع سياسات الفرع لمستودع
ado-enum --org myorg branch-policies --project "MyProject" --repository "MyRepo"

# تصفية لفرع معين
ado-enum --org myorg branch-policies --project "MyProject" --repository "MyRepo" --branch main

# مخرجات JSON
ado-enum --org myorg branch-policies --project "MyProject" --repository "MyRepo" --json

# قائمة بجميع المصنوعات
ado-enum --org myorg build-artifacts

# تنزيل جميع المصنوعات
ado-enum --org myorg build-artifacts --download

# تنزيل جميع المصنوعات لبناء معين
ado-enum --org myorg build-artifacts --project "MyProject" --build-id 42 --download

# تنزيل مصنوعات مسماة
ado-enum --org myorg build-artifacts --project "MyProject" --build-id 42 \
  --download --artifact-name "drop" --output-dir ./artefacts

proxychains ado-enum --org myorg -k projects