spraycharles

Spraycharles hey, yo 내 느낌은 spraycharles 같아 - Chiddy Bang 느리고 낮은 속도로 비밀번호를 스프레이하는 도구로, 긴 시간 동안 일정 간격으로 스프레이하도록 설계되었습니다. Office365, OWA, EWS, Okta, ADFS, Cisco SSL VPN, Citrix Netscaler, Sonicwall, NTLM over HTTP, SMB용 스프레이 플러그인이 포함되어 있습니다. @sprocketed님이 작성한 관련 블로그 게시물에서 NTLM over HTTP, Exchange We...

Go365

Go365 v2.0 AWS 게이트웨이 문제 수정 h0useh3ad 님 감사합니다! 프록시 서버 연결 실패 시 더 이상 종료되지 않음 graph 엔드포인트 추가 Go365를 사용하기 전에 이 README를 모두 읽어주세요! Go365는 Office365현재/곧 Microsoft365를 사용하는 조직에 대해 사용자 열거 및 비밀번호 추측 공격을 수행하도록 설계된 도구입니다. Go365는 대부분의 다른 도구가 사용하지 않는 login.microsoftonline.com의 고유한 SOAP API 엔드포인트를 사용합니다. 이메일 주소와...

oauthseeker

OAuthSeeker OAuthSeeker は、Microsoft Azure および Office365 内でのユーザー ID を侵害するために、悪意のある OAuth アプリケーションを使用してフィッシング攻撃を実行するレッドチームツールです。 🚀 主な機能 OAuthSeeker には以下の主要な機能があります: Azure アプリ OAuth フィッシング: Microsoft Azure および Office365 ユーザーを標的とした OAuth フィッシング攻撃を実行し、Microsoft Graph API および Microsoft Azure...

UhOh365

UhOh365 이 스크립트는 Office365에서 이메일 주소가 유효한지 확인할 수 있습니다. 로그인 시도를 전혀 수행하지 않으며, 제한이 없으며, 소셜 엔지니어링 평가에서 어떤 이메일이 존재하고 존재하지 않는지 찾는 데 매우 유용합니다. Microsoft는 "이메일 열거"를 취약점으로 간주하지 않으므로, 이는 "기능"을 활용하는 것입니다. 공개된 Office365 이메일 검증 스크립트가 몇 가지 더 있지만, 제가 본 것들은 모두 사용자 계정당 최소 1번의 로그인 시도가 필요합니다. 이는 감지 가능 하며 여러 계정에 대해 1개...

decode-spam-headers

decode-spam-headers.py 日々の管理業務で特定のメールが SPAM/迷惑メールに振り分けられた理由を理解したい場合でも、Red-Team のフィッシングシミュレーションの目的であっても、このスクリプトは役立ちます! このアイデアは、MS Defender for Office365 を備えた商用 MS Office365 E5 環境を対象に、商用フィッシングシミュレーション演習を実施した際に生まれました。想像がつくと思いますが、フィッシングシミュレーションの観点から見ると、かなり強固なセキュリティスタックです。 手作業でこれらすべての Office365 SMTP...

EUVD-2017-3883

Malware in sbrugna...

CVE-2024-36464 Media Types: Office365, SMTP passwords are unencrypted and visible in plaintext when exported

When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have no actual impact. The user would need to have permissions to access the media types and therefore would be expected to have access to these passwords...

"BingBang" flaw enabled altering of Bing search results, account takeover

Researchers from Wiz have discovered a way to allow for search engine manipulation and account takeover. The research in question focuses on several Microsoft applications, with everything stemming from a new type of attack aimed at Azure Active Directory. Azure Active Directory is a single sign-...

SecureMail: Modern Authentication doesn't work - "Incorrect user name or password"

You get the error"Incorrect user name or password" when trying to login your Office365 mailbox using Securemail When Securemail Network Access is set to Unrestricted the user is able to authenticate and synchronize emails properly...

What’s New in InsightIDR: Q4 2022 in Review

As we continue to empower security teams with the freedom to focus on what matters most, Q4 focused on investments and releases that contributed to that vision. With InsightIDR, Rapid7’s cloud-native SIEM and XDR solution, teams have the scale, comprehensive contextual coverage, and expertly vett...

Voicemail Scam Steals Microsoft Credentials

Attackers are using an oft-used and still effective lure to steal credentials to key Microsoft apps by sending emails notifying potential victims that they have a voicemail message, researchers have found. A team from Zscaler ThreatLabZ has been monitoring a campaign since May that targets key...

CVE-2021-43458

An Unquoted Service Path vulnerability exits in Vembu BDR 4.2.0.1 via a specially crafted file in the 1 hsflowd, 2 VembuBDR360Agent, or 3 VembuOffice365Agent service paths...

“FudCo” Spam Empire Tied to Pakistani Software Firm

In May 2015, KrebsOnSecurity briefly profiled "The Manipulaters," the name chosen by a prolific cybercrime group based in Pakistan that was very publicly selling spam tools and a range of services for crafting, hosting and deploying malicious email. Six years later, a review of the social media...

How to Configure Office365 for Single Sign-on with NetScaler as SAML Identity Provider

This article describes how to configure Office365 for Single Sign-on with NetScaler as SAML Identity Provider and this article also provides detailed steps to configure Windows Azure to use NetScaler as a Security Token Service STS/ Identity Provider IDP...

OneDrive Sync Provider Enumeration Module

This module will identify the Office 365 OneDrive endpoints for both business and personal accounts across all users providing access is permitted. It is useful for identifying document libraries that may otherwise not be obvious which could contain sensitive or useful information. Module Options...

UhOh365 - A Script That Can See If An Email Address Is Valid In Office365 (User/Email Enumeration)

A script that can see if an email address is valid in Office365. This does not perform any login attempts, is unthrottled, and is incredibly useful for social engineering assessments to find which emails exist and which don't. Microsoft does not consider "email enumeration" a vulnerability, so th...

Go365 - An Office365 User Attack Tool

Go365 is a tool designed to perform user enumeration and password guessing attacks on organizations that use Office365 now/soon Microsoft365. Go365 uses a unique SOAP API endpoint on login.microsoftonline.com that most other tools do not use. When queried with an email address and password, the...

Digitally Signed Bandook Trojan Reemerges in Global Spy Campaign

A wave of targeted cyberattack campaigns bent on espionage is cresting around the globe, using a strain of a 13-year old backdoor trojan named Bandook. According to Check Point Research, Bandook was last spotted being used in 2015 and 2017/2018, in the “Operation Manul” and “Dark Caracal”...

STRONTIUM: Detecting new patterns in credential harvesting

Microsoft has tied STRONTIUM to a newly uncovered pattern of Office365 credential harvesting activity aimed at US and UK organizations directly involved in political elections. Analysts from Microsoft Threat Intelligence Center MSTIC and Microsoft Identity Security have been tracking this new...

Fake Zoom meeting invitation phishing scam harvests Microsoft credentials

By Sudais Asif Initially targeting Zoom users; the phishing scam aims for Outlook and Office365 credentials. This is a post from HackRead.com Read the original post: Fake Zoom meeting invitation phishing scam harvests Microsoft credentials...