atlant-harden

AtlantHarden — Windows, Browser & Office Security Hardening Tool AtlantHarden is a comprehensive Windows 10/11 security hardening application with a modern, professional UI. It applies 606 hardening settings — including 354 DISA STIG controls across Windows 11, Edge, Chrome, Firefox, and Office 3...

msmailprobe

msmailprobe Enumerazione di Office 365 e Exchange È ampiamente noto che OWA Outlook Webapp è vulnerabile ad attacchi di enumerazione degli utenti basati sul tempo. Questo strumento sfrutta tutti i servizi noti, e anche alcuni meno conosciuti, esposti dalle installazioni predefinite di Exchange pe...

o365spray

o365spray o365spray ist ein Tool zur Benutzernamenerkennung und zum Passwort-Spraying, das auf Microsoft Office 365 O365 abzielt. Dieses Tool implementiert eine Sammlung von Enumeration- und Spray-Techniken, die von den in Danksagungen genannten Personen erforscht und identifiziert wurden. Nur fü...

o365enum

Enumerazione utenti di Office 365 Enumera nomi utente validi da Office 365 utilizzando ActiveSync, Autodiscover o la pagina di login di office.com. Utilizzo o365enum legge i nomi utente dal file fornito come primo parametro. Il file deve contenere un nome utente per riga. L'output è in formato CS...

TREVORspray

TREVORspray 2.0 TREVORspray è uno spruzzatore di password modulare con threading, proxy SSH, moduli di loot e altro ancora! Di @thetechr0mancer Installazione: root@kitploit: pip install git+https://github.com/blacklanternsecurity/trevorproxy pip install...

AADInternals

AADInternals AADInternals è un modulo PowerShell per amministrare Azure AD e Office 365 Per dettagli, visita https://aadinternals.com/aadinternals Installazione Esegui il seguente comando PowerShell per installare root@kitploit: Install-Module AADInternals...

o365-attack-toolkit

Cos'è o365-attack-toolkit o365-attack-toolkit consente agli operatori di eseguire attacchi di phishing OAuth. Abbiamo deciso di passare dal vecchio modello di definizioni statiche a un modello completamente "interattivo" con l'account in tempo reale. Alcuni dei cambiamenti Ricerca interattiva del...

onedrive_user_enum

onedriveuserenum v2.10 enumerate valid onedrive users For a full rundown of the enumeration technique and OneDrive enum, check out the blog here: https://www.trustedsec.com/blog/onedrive-to-enum-them-all/ If you are looking for the old, non-database vesion of OneDrive Enum, you can find it here:...

o365enum

Office 365 User Enumeration Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover, or office.com login page. Usage o365enum will read usernames from the file provided as first parameter. The file should have one username per line. The output is CSV-based for easier parsing. Val...

msmailprobe

msmailprobe Office 365 and Exchange Enumeration It is widely known that OWA Outlook Webapp is vulnerable to time-based user enumeration attacks. This tool leverages all known, and even some lesser-known services exposed by default Exchange installations to enumerate users. It also targets Office...

Awesome-BEC

Awesome-BEC Repository mit Angriffs- und Verteidigungsinformationen für Untersuchungen zu Business Email Compromise Office365/AzureAD ATT&CK O365 ATT&CK Azure Microsoft Azure Threat Research Matrix Microsoft 365-Lizenzierung Microsoft-Portale Azure-App-IDs Microsoft First-Party-App-IDs &...

msspray

Nota: Este repositório não está mais sendo desenvolvido msspray.py MSSpray é usado para realizar ataques de password spray contra o Azure AD, bem como validar a implementação de MFA nos endpoints do Azure e Office 365 root@kitploit: ------------------------------------------------------------ |...

CVE-2026-54733

The Microsoft 365 and Microsoft Entra ID Plugins for Moodle provide Office 365 and Azure Active Directory integration for Moodle. Prior to 4.5.6, 5.0.5, and 5.1.1, the Microsoft Office 365 Integration plugin localo365 Teams SSO endpoint ssologin.php base64-decodes a JWT payload and authenticates...

PT-2026-60486

Name of the Vulnerable Software and Affected Versions Microsoft Office 365 Integration plugin versions prior to 4.5.6 Microsoft Office 365 Integration plugin versions prior to 5.0.5 Microsoft Office 365 Integration plugin versions prior to 5.1.1 Description The Microsoft Office 365 Integration...

Microsoft Office Excel 缓冲区错误漏洞

Microsoft Excel is a spreadsheet software within the Office suite developed by the American company Microsoft. There is an information leakage vulnerability in Microsoft Excel, and attackers can exploit this vulnerability to obtain sensitive information...

Microsoft Office 缓冲区错误漏洞

Microsoft Office is a suite of office software products developed by Microsoft Corporation in the United States. Common components of this product include Word, Excel, Access, PowerPoint, and FrontPage. There are security vulnerabilities in Microsoft Office. Attackers can exploit these...

Microsoft Office Word 缓冲区错误漏洞

Microsoft Office Word is a word processing software developed by Microsoft and open sourced. There are security vulnerabilities in Microsoft Office Word. Attackers can exploit these vulnerabilities to execute code. The following products and versions are affected: Microsoft 365 Apps for Enterpris...

Microsoft Office 资源管理错误漏洞

Microsoft Office is a suite of office software products developed by Microsoft Corporation in the United States. Common components of this product include Word, Excel, Access, PowerPoint, and FrontPage. There is a resource management vulnerability in Microsoft Office. Attackers can exploit this...

Microsoft Office 资源管理错误漏洞

Microsoft Office is a suite of office software products developed by Microsoft Corporation in the United States. Common components of this product include Word, Excel, Access, PowerPoint, and FrontPage. There is a resource management vulnerability in Microsoft Office. Attackers can exploit this...

Microsoft Word 资源管理错误漏洞

Microsoft Word is a word processing software within the Office suite developed by Microsoft Corporation. There is a resource management vulnerability in Microsoft Word. Attackers can exploit this vulnerability to execute code remotely. The following products and versions are affected: Microsoft...