MSOLSpray
MSOLSpray copied to clipboard
dafthack
A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if t...
When spraying, MSOLSpray uses a `Write-Host` without a trailing LF to show incremental progress `N of NNN users tested`. Then the spray completes, there it no additional LF, so the...
Handles the error message related to conditional access policy blocking token issuance. Should handle the issue linked here: https://github.com/dafthack/MSOLSpray/issues/5#issue-1132582136
You can now provide a single username to test instead of only a list of usernames. I used this so I could wrap the invoke-spray in a for loop where...
Hi, During our tests we've found, that when sprayed User with a correct password - attempt failed due to Conditional Access Policy requirements, following error code will be thrown: ```...
Current state do not display to user or within outfile if username is correct and password incorrect, this could increase account lockout as user does not have information regarding incorrect...
Updated to log the accounts with the AADSTS error code AADSTS50126 (InvalidUserNameOrPassword) to both the screen as well as to the log when using the -Outfile parameter. This allows subsequent...
Hi Beau, I did some work on this function. Changelog below. Lemme know what you think of these changes. - Rebuild authentication and return code/ErrorReponse logic. - Dynamically parses the...
Has anyone encountered issues where the script was reporting accounts as being locked out when that wasn't the case? I've been getting 10+ accounts reporting as locked out on the...
I created 1000 users "all test users" in my tenant, added all those users to the users.txt file so it cycles through valid accounts with a bad password, but Password...
