Tools

A collection of tools which have proved useful either in their own right or as a starting point for other projects.

Intelligence gathering

UhOh365

Office 365 email address enumeration

GitHub - Xenov-X/UhOh365: A script that can see if an email address is valid in Office365 (user/email enumeration). This does not perform any login attempts, is unthrottled, and is incredibly useful for social engineering assessments to find which emails exist and which don't.GitHub

Intitial access

Evilginx

Reverse proxy that logs credentials, 2FA tokens and session tokens. Written in Go.

GitHub - kgretzky/evilginx2: Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authenticationGitHub

Modlishka

Reverse proxy that logs credentials.

GitHub - drk1wi/Modlishka: Modlishka. Reverse Proxy.GitHub

SpoofCheck

Quick check for DNS entries relating to SPF and DMARC to determine if a domain has implemented mail spoofing protections.

GitHub - BishopFox/spoofcheck: Simple script that checks a domain for email protectionsGitHub

Execution

PEzor2

Binary to .NET binary

https://github.com/phra/PEzor/blob/master/aggressor/PEzor.cna

https://github.com/phra/PEzor

Credential Access

SprayingToolkit

Password spraying tool for Lync/S4B & OWA

GitHub - byt3bl33d3r/SprayingToolkit: Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficientGitHub

Kerbrute

Kerberos brute forcing

GitHub - ropnop/kerbrute: A tool to perform Kerberos pre-auth bruteforcingGitHub