user-enumeration topic

VPN Overall Reconnaissance, Testing, Enumeration and eXploitation Toolkit

klezVirus

retrieve information via O365 and AzureAD with a valid cred

nyxgeek

onedrive user enumeration - pentest tool to enumerate valid o365 users

nyxgeek

Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover v1, or office.com login page.

gremwell

locate and attack Lync/Skype for Business

nyxgeek

SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing

Keramas

SMTP user enumeration via VRFY, EXPN and RCPT with clever timeout, retry and reconnect functionality.

cytopia

Brute force attack tool for Azure AD Autologon/Seamless SSO - Source: https://arstechnica.com/information-technology/2021/09/new-azure-active-directory-password-brute-forcing-flaw-has-no-fix/

nyxgeek

WordPress pentest tool

JoniRinta-Kahila

A tool for enumerating usernames from text, files, or websites

benbusby