What is EntraGoat?
Imagine a playground where you can:
- Escalate a user to Global Admin
- Chain permissions via the Graph API
- Abuse misconfigured apps and service principals
- Activate privileged roles to reset global admin’s MFA
- Simulate attacks without endangering production environments
That’s exactly what EntraGoat offers: a CTF-style platform for identity exploitation learning in the cloud.

Before we get our hooves dirty, here’s what you need:
- A test Microsoft Entra ID tenant (E5 trial works great)
- Global Administrator privileges in that tenant
- Node.js + npm installed
- PowerShell 7+
- Microsoft Graph PowerShell SDK
Step 1: Clone and launch the lab
Step 2: Launch your first challenge
Step 3: Explore, attack, escalate
Step 4: Capture the flag
Step 5: Clean it up
https://www.semperis.com/blog/getting-started-with-entragoat-entra-id-simulation-lab/
Published by
About our partner
Semperis
For security teams charged with defending hybrid and multi-cloud environments, Semperis ensures the integrity and availability of critical enterprise directory services at every step in the cyber kill chain and cuts recovery time by 90%. Purpose-built for securing hybrid identity environments—including Active Directory, Entra ID, and Okta—Semperis’ patented technology protects over 150 million identities from cyberattacks, data breaches and operational errors.The world’s leading organizations trust Semperis to spot directory vulnerabilities, intercept cyberattacks in progress and quickly recover from ransomware and other data integrity emergencies. Semperis is headquartered in Hoboken, New Jersey, and operates internationally, with its research and development team distributed throughout the United States, Canada and Israel. Semperis hosts the award-winning Hybrid Identity Protection Identity & Access Management (IAM) community, conference and podcast series (hipconf.com) and built the free community hybrid Active Directory cyber defender tools:Purple Knight – security assessment of your AD vulnerabilities: semperis.com/purple-knightForest Druid - attack path analysis tool to uncover the riskiest attack paths to your tier 0 assets: semperis.com/forest-druidEntraGoat - A deliberately vulnerable lab that simulates real-world identity misconfigurations in Microsoft Entra ID: semperis.com/blog/getting-started-with-entragoat-entra-id-simulation-labCheck out Midnight in the War Room: A Groundbreaking Cyberwar Documentary Featuring the World’s Leading Defenders and Reformed Hackers: midnightinthewarroom.com
Learn more