sleep Throttle HTTP requests every `N` seconds. adfs-url ADFS_URL AuthURL of the target domain's ADFS login page for password Specify which password spraying module to run. Lockout policy's reset time (in minutes). Number of password attempts to run per user before resetting paired PAIRED File containing list of credentials in username:password Target domain for validation, user enumeration, and/or h, -help show this help message and exit O365spray | Microsoft O365 User Enumerator and Password Sprayer - v3.0.2

O365spray -spray -U usernames.txt -P passwords.txt -count 2 -lockout 5 -domain Perform password spraying against a given domain: O365spray -enum -U usernames.txt -domain Perform username enumeration against a given domain: If the modules are run in conjunction with password spraying in a single execution, o365spray will automatically reset the lockout timer prior to performing the password spray - if enumeration is run alone, the user should be aware of how many and when each authentication attempt was made and manually reset the lockout timer before performing any password spraying. WARNING: The Autologon, oAuth2, and RST user enumeration modules work by submitting a single authentication attempt per user. This tool reimplements a collection of enumeration and spray techniques researched and identified by those mentioned in Acknowledgments.įor educational, authorized and/or research purposes only. O365spray is a username enumeration and password spraying tool aimed at Microsoft Office 365 (O365).

Download previous versions of xcode