retrieve information via O365 and AzureAD with a valid cred

onedrive user enumeration - pentest tool to enumerate valid o365 users

VPN Overall Reconnaissance, Testing, Enumeration and eXploitation Toolkit

locate and attack Lync/Skype for Business

Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover v1, or office.com login page.

User Enumeration of Microsoft Teams users via API

SMTP user enumeration via VRFY, EXPN and RCPT with clever timeout, retry and reconnect functionality.

Brute force attack tool for Azure AD Autologon/Seamless SSO - Source: https://arstechnica.com/information-technology/2021/09/new-azure-active-directory-password-brute-forcing-flaw-has-no-fix/

SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing

A tool for enumerating usernames from text, files, or websites

WordPress pentest tool

📧 Enumerate usernames through SMTP service

GitIntel is a robust GitHub OSINT tool crafted to reveal concealed insights from GitHub repositories and user profiles. Its capabilities make it an invaluable resource for ethical hacking, security assessments, and intelligence gathering in the realm of software development.

Proof of Concept in Go from Secureworks' research on Azure Active Directory Brute-Force Attacks. Inspired by @treebuilder's POC on PowerShell.

ssh user enumeration

Offensive tool for guessing Active Directory credentials via Kerberos

A PoC exploit for CVE-2021-4191 - GitLab User Enumeration.

A PoC exploit for CVE-2017-5487 - WordPress User Enumeration.

Wordpress plugin to stop user enumeration on author pages.

WordPress pentest tool