nyxgeek/o365recon

Stars
648
Rank 67,125 (Top 2 %)
Language
PowerShell
Created over 6 years ago
Updated almost 2 years ago

nyxgeek/o365recon

nyxgeek

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

retrieve information via O365 and AzureAD with a valid cred

o365recon

script to retrieve information via O365 and AzureAD with a valid cred

setup

Install these two modules

Install-Module MSOnline
Install-Module AzureAD

Usage:

.\o365recon.ps1 -azure

There is only one flag (-azure) and it is optional. You will be prompted to auth. You may be prompted twice if MFA is enabled.

onedrive_user_enum

onedrive user enumeration - pentest tool to enumerate valid o365 users

lyncsmash

locate and attack Lync/Skype for Business

ntlmscan

scan for NTLM directories

AzureAD_Autologon_Brute

Brute force attack tool for Azure AD Autologon/Seamless SSO - Source: https://arstechnica.com/information-technology/2021/09/new-azure-active-directory-password-brute-forcing-flaw-has-no-fix/

guestlist

tool for identifying guest relationships between companies

nyxgeek-rules

Custom password cracking rules for Hashcat and John the Ripper

dumpsniffer

tools for analyzing strings from password lists

teamstracker

using graph proxy to monitor teams user presence

track_the_planet

imgdevil

quick and dirty proof-of-concept to hide shells in images

weakpass_generator

generates weak passwords based on current date

nyxgeek-wordlists

wordlists for password cracking

username-lists

list of usernames and email addresses for pentests

twitter-usernames-wordlist

Wordlist compiled from Twitter usernames

rpcfiend

Use rpc null sessions to retrieve machine list, domain admin list, domain controllers

nyxgeek-readinglist

hacker folklore, history, and culture

f5-cookie-monster

give it a url, will decode f5 cookies to reveal internal IPs

phrack69

mirror of phrack issue 69

simple_scanners

simple pentest scanning scripts with no db

h4x0rsearch

list of domains that are included in h4x0rsearch.com

vulnmgmt

Be alerted ONLY on new vulnerabilities discovered in software you use

exploits

my public exploit code

bashscan

simple bash portscanner using nc

nyxgeek-slides

slide decks etc

classic_hacking_tools

archive of classic hack tools < 2000

bad_guest

cloudkicker

retrocomputing_resources

collection of old computing stuff