Modules: Copilot Studio Hunter ‐ Tools Recon

Copilot Studio Hunter - Tools Recon

Description

Conducts reconnaissance scanning to discover AI-driven tools and integrations exposed by open Copilot Studio bots. This module interacts with accessible bot endpoints using Puppeteer to enumerate connected tools, actions, and capabilities.

---

Prerequisites

This module requires Puppeteer (Node.js) to be installed:

Tool	Purpose	Installation
Puppeteer	Browser automation	Puppeteer GitHub

Puppeteer Setup

Puppeteer may need to be installed locally via the internal project directory:

cd src/powerpwn/copilot_studio/tools/pup_query_webchat
npm install

Windows Users: Chrome should be installed in the default location (C:\Program Files\Google\Chrome\Application\chrome.exe).

---

Usage

Scan a Single Bot URL

powerpwn copilot-studio-hunter tools-recon -u https://example.com/bot

Scan Multiple Bot URLs from File

powerpwn copilot-studio-hunter tools-recon -i bot_urls.txt

---

Parameters

Parameter	Description
-u, --url	Single bot URL to query for tools
-i, --input-file	Path to a file containing bot URLs (one per line)

Note: Either -u or -i is required.

---

Output

Results are saved to:

final_results/chat_exists_output_tools.xlsx

The Excel file contains discovered tools and integrations for each scanned bot.

Tip: Use bot URLs discovered by the deep-scan module as input for tools reconnaissance.