TREVORspray

TREVORspray 2.0 TREVORspray is a modular password sprayer with threading, SSH proxying, loot modules, and more! By @thetechr0mancer Installation: root@kitploit: pip install git+https://github.com/blacklanternsecurity/trevorproxy pip install git+https://github.com/blacklanternsecurity/trevorspray...

AADInternals

AADInternals AADInternals is PowerShell module for administering Azure AD and Office 365 For details, please visit https://aadinternals.com/aadinternals Installation Run the following PowerShell command to install root@kitploit: Install-Module AADInternals...

msmailprobe

msmailprobe Office 365 and Exchange Enumeration It is widely known that OWA Outlook Webapp is vulnerable to time-based user enumeration attacks. This tool leverages all known, and even some lesser-known services exposed by default Exchange installations to enumerate users. It also targets Office...

o365enum

Office 365 User Enumeration Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover, or office.com login page. Usage o365enum will read usernames from the file provided as first parameter. The file should have one username per line. The output is CSV-based for easier parsing. Val...

atlant-harden

AtlantHarden — Windows, Browser & Office Security Hardening Tool AtlantHarden is a comprehensive Windows 10/11 security hardening application with a modern, professional UI. It applies 606 hardening settings — including 354 DISA STIG controls across Windows 11, Edge, Chrome, Firefox, and Office 3...

onedrive_user_enum

onedriveuserenum v2.10 enumerate valid onedrive users For a full rundown of the enumeration technique and OneDrive enum, check out the blog here: https://www.trustedsec.com/blog/onedrive-to-enum-them-all/ If you are looking for the old, non-database vesion of OneDrive Enum, you can find it here:...

o365enum

Office 365 用户枚举 使用 ActiveSync、Autodiscover 或 office.com 登录页面枚举 Office 365 中的有效用户名。 使用方法 o365enum 将从作为第一个参数提供的文件中读取用户名。文件每行应包含一个用户名。输出采用 CSV 格式，便于解析。有效状态可以是 0（无效用户）、1（有效用户）、2（有效用户且密码有效）。 root@kitploit: python3.6 o365enum.py -h usage: o365enum.py -h -u USERLIST -p PASSWORD -n NUM -v -m...

msmailprobe

msmailprobe Enumeración de Office 365 y Exchange Es ampliamente conocido que OWA Outlook Webapp es vulnerable a ataques de enumeración de usuarios basados en tiempo. Esta herramienta aprovecha todos los servicios conocidos, e incluso algunos menos conocidos, expuestos por instalaciones...

o365-attack-toolkit

o365-attack-toolkit 是什么 o365-attack-toolkit 允许操作者执行 OAuth 钓鱼攻击。 我们决定从静态定义的旧模式转向与账户进行完全“实时”交互。 一些变化 交互式邮件搜索 - 允许你像拥有完全访问权限一样搜索用户邮件。 发送邮件 - 允许你从用户邮箱发送包含附件的 HTML/TEXT 邮件。 交互式文件搜索和下载 - 允许你使用特定关键词搜索文件并离线下载。 文件替换 - 作为宏后门功能的替代方案实现。 架构 该工具包由几个组件组成 钓鱼端点 钓鱼端点负责提供执行 OAuth 令牌钓鱼的 HTML 文件。 后端服务...

o365spray

o365spray o365spray is a username enumeration and password spraying tool aimed at Microsoft Office 365 O365. This tool reimplements a collection of enumeration and spray techniques researched and identified by those mentioned in Acknowledgments. For educational, authorized and/or research purpose...

Awesome-BEC

Awesome-BEC Repository mit Angriffs- und Verteidigungsinformationen für Untersuchungen zu Business Email Compromise Office365/AzureAD ATT&CK O365 ATT&CK Azure Microsoft Azure Threat Research Matrix Microsoft 365-Lizenzierung Microsoft-Portale Azure-App-IDs Microsoft First-Party-App-IDs &...

msspray

Hinweis: Dieses Repository wird nicht mehr weiterentwickelt msspray.py MSSpray wird verwendet, um Password-Spray-Angriffe gegen Azure AD durchzuführen und die Implementierung von MFA auf Azure- und Office-365-Endpunkten zu validieren root@kitploit:...

CVE-2026-54733

The Microsoft 365 and Microsoft Entra ID Plugins for Moodle provide Office 365 and Azure Active Directory integration for Moodle. Prior to 4.5.6, 5.0.5, and 5.1.1, the Microsoft Office 365 Integration plugin localo365 Teams SSO endpoint ssologin.php base64-decodes a JWT payload and authenticates...

PT-2026-60486

Name of the Vulnerable Software and Affected Versions Microsoft Office 365 Integration plugin versions prior to 4.5.6 Microsoft Office 365 Integration plugin versions prior to 5.0.5 Microsoft Office 365 Integration plugin versions prior to 5.1.1 Description The Microsoft Office 365 Integration...

Microsoft Office Excel 缓冲区错误漏洞

Microsoft Excel is a spreadsheet software within the Office suite developed by the American company Microsoft. There is an information leakage vulnerability in Microsoft Excel, and attackers can exploit this vulnerability to obtain sensitive information...

Microsoft Office 缓冲区错误漏洞

Microsoft Office is a suite of office software products developed by Microsoft Corporation in the United States. Common components of this product include Word, Excel, Access, PowerPoint, and FrontPage. There are security vulnerabilities in Microsoft Office. Attackers can exploit these...

Microsoft Office Word 缓冲区错误漏洞

Microsoft Office Word is a word processing software developed by Microsoft and open sourced. There are security vulnerabilities in Microsoft Office Word. Attackers can exploit these vulnerabilities to execute code. The following products and versions are affected: Microsoft 365 Apps for Enterpris...

Microsoft Office 资源管理错误漏洞

Microsoft Office is a suite of office software products developed by Microsoft Corporation in the United States. Common components of this product include Word, Excel, Access, PowerPoint, and FrontPage. There is a resource management vulnerability in Microsoft Office. Attackers can exploit this...

Microsoft Office 资源管理错误漏洞

Microsoft Office is a suite of office software products developed by Microsoft Corporation in the United States. Common components of this product include Word, Excel, Access, PowerPoint, and FrontPage. There is a resource management vulnerability in Microsoft Office. Attackers can exploit this...

Microsoft Word 资源管理错误漏洞

Microsoft Word is a word processing software within the Office suite developed by Microsoft Corporation. There is a resource management vulnerability in Microsoft Word. Attackers can exploit this vulnerability to execute code remotely. The following products and versions are affected: Microsoft...