- @Macmod Update how enumeration performs concurrent requests by limiting the number of blocking tasks at any one time
- @parispjones Add username and password file validation
- Add scope, resource, and client_id randomization for the
oauth2
enumeration and spraying modules - Several code tweaks for general clean up
- Add support for User-Agent randomization handling
- Update how paired lists are handled during password spraying to account for users with more than one password so lockout thresholds are respected
- Update how modules are called and handled to allow for more modular handling
- Add autologon module for enumeration and spraying based on AADInternals
- Add rst module for enumeration and spraying based on Go365
- Update list of valid AADSTS codes checked against during password spraying
- Fix execution bugs when running on Windows
- Add support for FireProx proxy URL handling
- Update list of valid AADSTS codes checked against during password spraying
- Clean up and optimize enum and spray modules
- Disable modules that no longer function as expected
- Add O365 reporting API password spraying module based on Daniel Chronlund's blog post and the ADFSpray tool. (20/07/2021)
- Fix typos in sprayer modules that caused errors. (01/08/2021)
- Add handling if a spraying user list is cleared during a run it does not throw an error. (01/08/2021)
- Add oAuth2 user enumeration module based on AADInternals
- Convert tool to package for PyPi deployment
- Add LICENSE
- Add CHANGELOG
- Code redesign for Python 3
- Code reformatting via
black
- The office.com enumeration module has been implemented and set to default for Managed realms.
- The ActiveSync enumeration and password spraying modules have been reimplemented in an attempt to handle the recent updates from Microsoft that are causing invalid results. The ActiveSync enumeration module still returns some false positives - this is why the office.com enumeration module has been moved to the default process.
- When a Federated realm is identified, the user is prompted to switch enumeration to OneDrive (otherwise disabled due to invalid results from different modules) and to switch spraying to ADFS (otherwise sprays against the user selected spray-type).