oauthseeker

OAuthSeeker OAuthSeeker 는 Microsoft Azure 및 Office365 내에서 사용자 ID를 손상시키기 위해 악성 OAuth 애플리케이션을 사용하여 피싱 공격을 수행하는 레드 팀 도구입니다. 🚀 주요 기능 OAuthSeeker는 다음과 같은 주요 기능을 제공합니다: Azure App OAuth 피싱: Microsoft Azure 및 Office365 사용자를 대상으로 OAuth 피싱 공격을 수행하여 Microsoft Graph API 및 Microsoft Azure 리소스에 대한 액세스 권한을 얻습니다...

UhOh365

UhOh365 이 스크립트는 Office365에서 이메일 주소가 유효한지 확인할 수 있습니다. 로그인 시도를 전혀 수행하지 않으며, 제한이 없으며, 소셜 엔지니어링 평가에서 어떤 이메일이 존재하고 존재하지 않는지 찾는 데 매우 유용합니다. Microsoft는 "이메일 열거"를 취약점으로 간주하지 않으므로, 이는 "기능"을 활용하는 것입니다. 공개된 Office365 이메일 검증 스크립트가 몇 가지 더 있지만, 제가 본 것들은 모두 사용자 계정당 최소 1번의 로그인 시도가 필요합니다. 이는 감지 가능 하며 여러 계정에 대해 1개...

Go365

Go365 v2.0 AWS 게이트웨이 문제 수정 h0useh3ad 님 감사합니다! 프록시 서버 연결 실패 시 더 이상 종료되지 않음 graph 엔드포인트 추가 Go365를 사용하기 전에 이 README를 모두 읽어주세요! Go365는 Office365현재/곧 Microsoft365를 사용하는 조직에 대해 사용자 열거 및 비밀번호 추측 공격을 수행하도록 설계된 도구입니다. Go365는 대부분의 다른 도구가 사용하지 않는 login.microsoftonline.com의 고유한 SOAP API 엔드포인트를 사용합니다. 이메일 주소와...

spraycharles

Spraycharles эй, я чувствую себя как spraycharles — Chiddy Bang Инструмент для медленного и незаметного перебора паролей, предназначенный для распыления с интервалом в течение длительного времени. Включает плагины для распыления Office365, OWA, EWS, Okta, ADFS, Cisco SSL VPN, Citrix Netscaler,...

EUVD-2017-3883

Malware in sbrugna...

CVE-2024-36464 Media Types: Office365, SMTP passwords are unencrypted and visible in plaintext when exported

When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have no actual impact. The user would need to have permissions to access the media types and therefore would be expected to have access to these passwords...

"BingBang" flaw enabled altering of Bing search results, account takeover

Researchers from Wiz have discovered a way to allow for search engine manipulation and account takeover. The research in question focuses on several Microsoft applications, with everything stemming from a new type of attack aimed at Azure Active Directory. Azure Active Directory is a single sign-...

SecureMail: Modern Authentication doesn't work - "Incorrect user name or password"

You get the error"Incorrect user name or password" when trying to login your Office365 mailbox using Securemail When Securemail Network Access is set to Unrestricted the user is able to authenticate and synchronize emails properly...

What’s New in InsightIDR: Q4 2022 in Review

As we continue to empower security teams with the freedom to focus on what matters most, Q4 focused on investments and releases that contributed to that vision. With InsightIDR, Rapid7’s cloud-native SIEM and XDR solution, teams have the scale, comprehensive contextual coverage, and expertly vett...

Voicemail Scam Steals Microsoft Credentials

Attackers are using an oft-used and still effective lure to steal credentials to key Microsoft apps by sending emails notifying potential victims that they have a voicemail message, researchers have found. A team from Zscaler ThreatLabZ has been monitoring a campaign since May that targets key...

CVE-2021-43458

An Unquoted Service Path vulnerability exits in Vembu BDR 4.2.0.1 via a specially crafted file in the 1 hsflowd, 2 VembuBDR360Agent, or 3 VembuOffice365Agent service paths...

“FudCo” Spam Empire Tied to Pakistani Software Firm

In May 2015, KrebsOnSecurity briefly profiled "The Manipulaters," the name chosen by a prolific cybercrime group based in Pakistan that was very publicly selling spam tools and a range of services for crafting, hosting and deploying malicious email. Six years later, a review of the social media...

How to Configure Office365 for Single Sign-on with NetScaler as SAML Identity Provider

This article describes how to configure Office365 for Single Sign-on with NetScaler as SAML Identity Provider and this article also provides detailed steps to configure Windows Azure to use NetScaler as a Security Token Service STS/ Identity Provider IDP...

OneDrive Sync Provider Enumeration Module

This module will identify the Office 365 OneDrive endpoints for both business and personal accounts across all users providing access is permitted. It is useful for identifying document libraries that may otherwise not be obvious which could contain sensitive or useful information. Module Options...

UhOh365 - A Script That Can See If An Email Address Is Valid In Office365 (User/Email Enumeration)

A script that can see if an email address is valid in Office365. This does not perform any login attempts, is unthrottled, and is incredibly useful for social engineering assessments to find which emails exist and which don't. Microsoft does not consider "email enumeration" a vulnerability, so th...

Go365 - An Office365 User Attack Tool

Go365 is a tool designed to perform user enumeration and password guessing attacks on organizations that use Office365 now/soon Microsoft365. Go365 uses a unique SOAP API endpoint on login.microsoftonline.com that most other tools do not use. When queried with an email address and password, the...

Digitally Signed Bandook Trojan Reemerges in Global Spy Campaign

A wave of targeted cyberattack campaigns bent on espionage is cresting around the globe, using a strain of a 13-year old backdoor trojan named Bandook. According to Check Point Research, Bandook was last spotted being used in 2015 and 2017/2018, in the “Operation Manul” and “Dark Caracal”...

STRONTIUM: Detecting new patterns in credential harvesting

Microsoft has tied STRONTIUM to a newly uncovered pattern of Office365 credential harvesting activity aimed at US and UK organizations directly involved in political elections. Analysts from Microsoft Threat Intelligence Center MSTIC and Microsoft Identity Security have been tracking this new...

Fake Zoom meeting invitation phishing scam harvests Microsoft credentials

By Sudais Asif Initially targeting Zoom users; the phishing scam aims for Outlook and Office365 credentials. This is a post from HackRead.com Read the original post: Fake Zoom meeting invitation phishing scam harvests Microsoft credentials...

openSUSE Security Update : MozillaThunderbird (openSUSE-2020-94)

This update for MozillaThunderbird to version 68.4.1 fixes the following issues : Security issues fixed : - CVE-2019-17026: IonMonkey type confusion with StoreElementHole and FallibleStoreElement - CVE-2019-17016: Bypass of @namespace CSS sanitization during pasting - CVE-2019-17017: Type Confusi...