Download microsoft activesync 3.7 password#
If domain validation, user enumeration, or password spraying is a part of your proposed attack/recon automation, see the below modules and import usage exmaples. O365spray has been packaged to allow for use within automation scenarios. output OUTPUT Output directory for results and test case files. proxy PROXY HTTP/S proxy to pass traffic through timeout TIMEOUT HTTP request timeout in seconds. safe SAFE Terminate password spraying run if `N` locked accounts are rate RATE Number of concurrent connections (attempts) during enumeration jitter Jitter extends -sleep period by percentage given (0-100). Randomized by passing the value `-1` (between 1 sec and 2 sleep Throttle HTTP requests every `N` seconds. adfs-url ADFS_URL AuthURL of the target domain's ADFS login page for password Specify which password spraying module to run. O365spray -spray -U usernames.txt -P passwords.txt -count 2 -lockout 5 -domain Perform password spraying against a given domain: O365spray -enum -U usernames.txt -domain Perform username enumeration against a given domain: See the section below for more information about using previous versions. If any bugs/errors are encountered, please open an Issue with the details (or a Pull Request with the proposed fix). If the module is run in conjunction with password spraying in a single execution, o365spray will automatically reset the lockout timer prior to performing the password spray - if enumeration is run alone, the user should be aware of how many and when each authentication attempt was made and manually reset the lockout timer before performing any password spraying. WARNING: The oAuth2 module for user enumeration is performed by submitting a single authentication attempt per user. This tool reimplements a collection of enumeration and spray techniques researched and identified by those mentioned in Acknowledgments. O365spray a username enumeration and password spraying tool aimed at Microsoft Office 365 (O365). For educational, authorized and/or research purposes only.