CredMaster

CredMaster copied to clipboard

Error: Unable to load AWS Credentials

8

Hello, Recently came across a problem with this tool all of a sudden. Upon trying to run a spray I receive an error:  The simple command I've tried running...

mbb5546

AWS auth is janky

1

Currently, CredMaster cannot fall through to boto3's auth. In other words, using the `default` AWS profile or AWS environment variables for configuration is impossible without passing flags (i.e. `--profile_name default`...

TheToddLuci0

OWA/EWS Plugins Authentication Failed with Valid Credentials

10

While attempting to use the OWA/EWS plugins I am getting "Authentication Failed:" with a valid credential. O365 module works as expected for the same credentials. Possibly an issue with NTLM...

webofsnyderman

Optiv's Go365 tool implementation

1

https://github.com/Optiv/Go365 Optiv's Go365 tool does some awesome bruteforcing & enum for Office365 tenants. Would be great to have a CredMaster plugin for it, with an optional `--endpoint` flag to specify...

knavesec

ADFS module always reports success despite invalid credentials

3

I'm attempting to spray an ADFS endpoint with a list of email addresses validated using [OneDriveEnum](https://github.com/nyxgeek/onedrive_user_enum). I've tried specifying the URL according to the instructions, but also as `https://federation.target.com/adfs/ls/`. Neither...

Anthirian

AADSTS53003 error related to Conditional Access Policy(CAP) isn't registred as a successful spray

1

Hi, Thank you so much for your great work on this tool. I have been using it for the last 2 years and loving the work! Unfortunately, when spraying o365...

alecmoran1

o365 plugin does not work anymore

5

Hello, I recently found out the the o365 module uses the autodiscover login (https://autodiscover-s.outlook.com) with BasicAuth to do the spraying. Recently, Microsoft have block Basic Auth authentication on all tenant...

TwistedSim

Lockout Potential: Delay Skipped For Unknown Reasons

6

During a standard run of CredMaster, I encountered an issue where the delay setting in my conf file was skipped completely and the next password run started immediately. I had...

curi0usJack

```bash ──(venv)─(kali㉿kali)-[~/git/CredMaster] └─$ aws sso login --profile redteam-pwr Attempting to automatically open the SSO authorization page in your default browser. If the browser does not open or you wish to...

TheToddLuci0

[O365Enum] Users with passwordless auth return not found

8

Calling via credmaster, we get  (Note: I added a `print(response.json())` at line 59 to get the json.) ```json { "Username": "[email protected]", "Display": "[email protected]", "IfExistsResult": 1, "IsUnmanaged": false, "ThrottleStatus": 0,...

TheToddLuci0