Loading
Web App
5/6 checks passed
Updated May 2026Windows LAPS Self‑Service Portal
Windows LAPS Self-Service Portal lets users securely retrieve the LAPS password for their own device without helpdesk tickets. Built on Azure Static Web Apps + Azure Functions and Entra ID, it enforces an only-my-device rule, requires a justification, and auto-hides the password after 60 seconds. Every access is auditable in Azure Table Storage, with a zero-stored-secrets design and Graph access via a Managed Identity.
Screenshots
1 / 5Swipe to see more
Security Analysis
5of 6
1 Issue Found
11 files scanned on Sep 20, 2026
Issues Detected
No Credential Theft
No token or credential harvesting code
getLapsPassword decodes and returns the LAPS password as plaintext within the API response. The laps-password flow delivers the credential directly to the client (password field included in the JSON response). This creates a high-risk exposure scenario if the API is intercepted, logged, or leaked. Recommendation: avoid returning plaintext passwords in API responses; explore ephemeral or scope-limited credential delivery mechanisms, enforce strict transport security, and minimize exposure by restricting who can access the endpoint.
Passed Checks
No Obfuscated Code
No Remote Execution
No Data Exfiltration
No Malicious Patterns
No Hardcoded Secrets
AI Analysis
Overall, the code implements a normal Intune/Graph-based LAPS self-service flow but presents notable security considerations: (1) plaintext LAPS passwords are sent in API responses, which is high risk and warrants design reconsideration; (2) justification and PII fields are logged to audit/storage and telemetry, presenting potential data exposure; (3) a minor validation edge case (MIN_JUSTIFICATION parsing) could bypass length checks if misconfigured. There are no obfuscated/remote code execution patterns or hardcoded secrets. Recommended mitigations focus on reducing credential exposure, redacting or encrypting sensitive data in logs/telemetry, tightening access controls to audit/telemetry stores, and validating environment-derived configuration robustly.
You might also like
Web App
Mark Ringo
RepoFabric
RepoFabric is a self-hosted WinGet source platform for Microsoft-managed fleets. It provides Entra ID sign-in, one-click Intune policy export (DesktopAppInstaller CSP) to point endpoints to a private source, Azure Arc readiness, and a GUI admin console. It also offers a REST API and a 48-cmdlet PowerShell module, GitOps manifests, scheduled sync, and LAN peer-caching to reduce bandwidth.
Mark RingoWeb App
Nicola Suter
Intune Drive Mapping Generator
A web-based tool that generates PowerShell scripts for network drive mapping on Intune-managed Windows 10 devices. Converts existing Group Policy drive exports to Intune-compatible scripts, supports security group filtering with nested groups, and enables recurring execution.
Nicola SuterWeb App
IntuneAdminTemplateMigrator
Converts Administrative Template policies to Settings Catalog — reads your existing policies and creates the equivalent Settings Catalog profiles with the same settings and values.
J
Joery Van den BoschWeb App
jorgeasaurus
NukeTool
Reset your tenant.
jorgeasaurus