Session Sushi Edge extension security report

Session Sushi is a browser extension designed for cybersecurity professionals and ethical hackers working with Microsoft 365 environments. It provides tools to extract and manage cookies, OAuth tokens, and Graph API data, helping users analyze web session artifacts relevant to M365 services like OneDrive, Teams, SharePoint, and Exchange. The extension offers organized panels for each Microsoft service, enabling straightforward access to session information and API interaction. Key Features: - Manage cookies efficiently with real-time retrieval, search, filtering, and batch export/import. - Extract and manipulate OAuth tokens from active Microsoft 365 sessions for direct access to cloud assets. - Interact with Microsoft services (Graph API, Teams, SharePoint, OneDrive, Mailbox, Calendar, Directory) through dedicated tabs with automatic token use. - Explore Graph API to enumerate resources and permissions quickly using preset buttons. - View and manage Exchange Online mailbox rules to investigate session persistence and privileges. - Clean, tabbed interface to streamline navigation among different modules and maintain workflow clarity. How It Works: 1. Install Session Sushi and open it via the browser toolbar icon. 2. Select the appropriate tab depending on your task (e.g., Cookies, Sessions, Graph, Teams). 3. Use the Cookies tab to view, filter, or export browser cookies or import them for replay. 4. In Sessions, view active M365 sessions and extract OAuth tokens for analysis. 5. Use service-specific tabs to send authenticated API queries and review data. 6. Inspect mailbox rules or calendar entries to gather information for security assessment. 7. Export gathered data for further use during engagements. Privacy: - No personal data collected. Session Sushi operates locally with session data and tokens only.