MSOLSpray
Password sprayer
A tool that simulates password login attempts to Azure accounts, logging relevant information such as account status and error codes.
A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.
918 stars
23 watching
171 forks
Language: PowerShell
last commit: 11 months ago
Linked from 1 awesome list
kyuu-ji/awesome-azure-pentestRelated projects:
| Repository | Description | Stars |
|---|---|---|
 martiningesen/msolspray | A tool for testing Microsoft Online accounts by spraying passwords and gathering account information. | 85 |
| dafthack/domainpasswordspray | A tool designed to automate password spraying attacks against domain users | 1,799 |
 ustayready/credking | A tool that automates password spraying using AWS Lambda across multiple regions and IP addresses. | 579 |
 hagrid29/bof-sprayad | A tool that uses Windows API to perform password spray attacks on domain accounts using either Kerberos or LDAP authentication. | 43 |
 outflanknl/spray-ad | Automates an Active Directory password spraying attack to identify weak or guessable passwords | 426 |
 cboesecurity/password_pwncheck | A tool that checks password strength against breached lists and other rules to help maintain enterprise password policies. | 158 |
 xfox64x/hashcat-stuffs | A collection of tools and scripts designed to aid in password cracking using the Hashcat software | 50 |
 optiv/microsoft365_devicephish | A tool designed to demonstrate a vulnerability in Microsoft's OAuth Authorization Flow for phishing attacks | 94 |
 joelgmsec/cloudtopolis | Tool to facilitate password cracking using cloud-based services | 397 |
 0xzdh/o365spray | A tool designed to automate the process of identifying and authenticating users on Microsoft O365 platforms by enumerating usernames and spraying passwords. | 785 |
 hashview/hashview | A web-based tool for managing and automating password cracking tasks with analytics capabilities. | 362 |
 eladshamir/whisker | A tool for manipulating Active Directory user and computer accounts by adding shadow credentials. | 824 |
 kpcyrd/authoscope | Tools and scripts for cracking custom network authentication systems | 402 |
 devio/mod0keecrack | A tool to crack passwords from KeePass 2 databases | 130 |
 detroitenglish/pw-pwnage-cfworker | Provides a secure password scoring API using Cloudflare Workers and a combination of zxcvbn and haveibeenpwned data | 154 |