Attacking Login Portals

Password Spraying : Office 365, Outlook Web App, Okta SSO

GitHub - blacklanternsecurity/TREVORspray: TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!GitHub

Outlook Web App (OWA) Brute Force Utility

msf6 > auxiliary/scanner/http/owa_login

Bypassing Microsoft 365 MFA

GitHub - dafthack/MFASweep: A tool for checking if MFA is enabled on multiple Microsoft ServicesGitHub

Search through email in Microsoft Exchange

GitHub - dafthack/MailSniper: MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.GitHub