Modules: Copilot Studio Hunter ‐ Tools Recon

Description

Conducts a reconnaissance scan for AI-driven tools in open Copilot Studio bots based on interaction with the exposed agents domains and using an automation which utilizes different Copilot Studio mechanics and Puppeteer.

Additional Installation Notes

1. Note that Puppeteer might need to be installed locally via the local Puppeteer project directory:
   • Locate the internal Puppeteer directory (under the src -> powerpwn -> copilot_studio -> tools -> pup_query_webchat directory)
   • Run npm install
2. For Windows machines running this module, it's recommended to have a Chrome installation in the default location (C:\Program Files\Google\Chrome\Application\chrome.exe).

Usage

powerpwn cli

• Run the following command to perform a tools recon for any accessible Copilot Studio demo websites based on a single domain:
  copilot-studio-hunter tools-recon -u {url}

• Run the following command to perform a tools recon for any accessible Copilot Studio demo websites based on a list of domains:
  copilot-studio-hunter tools-recon -i {file_of_domains}

Command Parameters

• url: The URL to query for tools
• input_file: The path to an input file with a list of URLs to query for tools