retrieve information via O365 and AzureAD with a valid cred

onedrive user enumeration - pentest tool to enumerate valid o365 users

VPN Overall Reconnaissance, Testing, Enumeration and eXploitation Toolkit

locate and attack Lync/Skype for Business

Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover v1, or office.com login page.

SMTP user enumeration via VRFY, EXPN and RCPT with clever timeout, retry and reconnect functionality.

User Enumeration of Microsoft Teams users via API

Brute force attack tool for Azure AD Autologon/Seamless SSO - Source: https://arstechnica.com/information-technology/2021/09/new-azure-active-directory-password-brute-forcing-flaw-has-no-fix/

SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing

A tool for enumerating usernames from text, files, or websites

WordPress pentest tool

📧 Enumerate usernames through SMTP service

Proof of Concept in Go from Secureworks' research on Azure Active Directory Brute-Force Attacks. Inspired by @treebuilder's POC on PowerShell.

Offensive tool for guessing Active Directory credentials via Kerberos

ssh user enumeration

A PoC exploit for CVE-2017-5487 - WordPress User Enumeration.

Wordpress plugin to stop user enumeration on author pages.

WordPress pentest tool

A PoC exploit for CVE-2021-4191 - GitLab User Enumeration.

Don't have a professional version of BurpSuite? It doesn 't matter . I wrote scripts to solve their labs.