TREVORspray

TREVORspray 2.0 TREVORspray is a modular password sprayer with threading, SSH proxying, loot modules, and more! By @thetechr0mancer Installation: pip install git+https://github.com/blacklanternsecurity/trevorproxy pip install git+https://github.com/blacklanternsecurity/trevorspray See the...

atlant-harden

AtlantHarden — Windows, Browser & Office Security Hardening Tool AtlantHarden is a comprehensive Windows 10/11 security hardening application with a modern, professional UI. It applies 606 hardening settings — including 354 DISA STIG controls across Windows 11, Edge, Chrome, Firefox, and Office 3...

o365spray

o365spray o365spray is a username enumeration and password spraying tool aimed at Microsoft Office 365 O365. This tool reimplements a collection of enumeration and spray techniques researched and identified by those mentioned in Acknowledgments. For educational, authorized and/or research purpose...

AADInternals

AADInternals AADInternals is PowerShell module for administering Azure AD and Office 365 For details, please visit https://aadinternals.com/aadinternals Installation Run the following PowerShell command to install Install-Module AADInternals...

msmailprobe

msmailprobe Office 365 and Exchange Enumeration It is widely known that OWA Outlook Webapp is vulnerable to time-based user enumeration attacks. This tool leverages all known, and even some lesser-known services exposed by default Exchange installations to enumerate users. It also targets Office...

o365enum

Office 365 User Enumeration Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover, or office.com login page. Usage o365enum will read usernames from the file provided as first parameter. The file should have one username per line. The output is CSV-based for easier parsing. Val...

o365-attack-toolkit

Qu'est-ce que o365-attack-toolkit o365-attack-toolkit permet aux opérateurs d'effectuer des attaques de phishing OAuth. Nous avons décidé de passer de l'ancien modèle de définitions statiques à une approche entièrement « interactive » avec le compte en temps réel. Quelques changements Recherche...

Awesome-BEC

Awesome-BEC Репозиторий с информацией об атаках и защите для расследований компрометации деловой электронной почты Office365/AzureAD ATT&CK O365 ATT&CK Azure Microsoft Azure Threat Research Matrix Microsoft 365 Licensing Microsoft Portals Azure App IDs Microsoft First Party App IDs & Graph...

msmailprobe

msmailprobe Énumération d'Office 365 et Exchange Il est largement connu que l'OWA Outlook Web App est vulnérable aux attaques d'énumération d'utilisateurs basées sur le temps. Cet outil exploite tous les services connus, ainsi que certains moins connus, exposés par défaut par les installations...

o365enum

Énumération des utilisateurs Office 365 Énumérez les noms d'utilisateurs valides d'Office 365 en utilisant ActiveSync, Autodiscover ou la page de connexion office.com. Usage o365enum lira les noms d'utilisateurs depuis le fichier fourni en premier paramètre. Le fichier doit contenir un nom...

onedrive_user_enum

onedriveuserenum v2.10 enumerate valid onedrive users For a full rundown of the enumeration technique and OneDrive enum, check out the blog here: https://www.trustedsec.com/blog/onedrive-to-enum-them-all/ If you are looking for the old, non-database vesion of OneDrive Enum, you can find it here:...

msspray

Примечание: этот репозиторий больше не разрабатывается msspray.py MSSpray используется для проведения атак парольного распыления password spray против Azure AD, а также для проверки реализации MFA на конечных точках Azure и Office 365. ------------------------------------------------------------ ...

The vulnerability of Microsoft Word, a component of the Microsoft Office 365 suite of programs, allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Word and the Microsoft Office 365 suite is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of Microsoft Word, the Microsoft Office 365 suite of programs, related to numerical truncation errors, allows a perpetrator to disclose protected information.

The vulnerability of Microsoft Word and the Microsoft Office 365 suite is related to numerical truncation errors. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerabilities of Microsoft Office, Excel, and 365 Apps for Enterprise packages allow a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in the heap. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of Microsoft Office and Office 365 applications relates to the possibility of exploiting memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office and Office 365 packages relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CVE-2026-54733

The Microsoft 365 and Microsoft Entra ID Plugins for Moodle provide Office 365 and Azure Active Directory integration for Moodle. Prior to 4.5.6, 5.0.5, and 5.1.1, the Microsoft Office 365 Integration plugin localo365 Teams SSO endpoint ssologin.php base64-decodes a JWT payload and authenticates...

CVE-2026-54733

The Microsoft 365 and Microsoft Entra ID Plugins for Moodle provide Office 365 and Azure Active Directory integration for Moodle. Prior to 4.5.6, 5.0.5, and 5.1.1, the Microsoft Office 365 Integration plugin localo365 Teams SSO endpoint ssologin.php base64-decodes a JWT payload and authenticates...

EUVD-2026-44938

The Microsoft 365 and Microsoft Entra ID Plugins for Moodle provide Office 365 and Azure Active Directory integration for Moodle. Prior to 4.5.6, 5.0.5, and 5.1.1, the Microsoft Office 365 Integration plugin localo365 Teams SSO endpoint ssologin.php base64-decodes a JWT payload and authenticates...

PT-2026-60486

Name of the Vulnerable Software and Affected Versions Microsoft Office 365 Integration plugin versions prior to 4.5.6 Microsoft Office 365 Integration plugin versions prior to 5.0.5 Microsoft Office 365 Integration plugin versions prior to 5.1.1 Description The Microsoft Office 365 Integration...