nyxgeek/o365recon

Stars
685
Rank 65,982 (Top 2 %)
Language
PowerShell
Created about 7 years ago
Updated over 2 years ago

nyxgeek/o365recon

nyxgeek

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

retrieve information via O365 and AzureAD with a valid cred

o365recon

script to retrieve information via O365 and AzureAD with a valid cred

setup

Install these two modules

Install-Module MSOnline
Install-Module AzureAD

Usage:

.\o365recon.ps1 -azure

There is only one flag (-azure) and it is optional. You will be prompted to auth. You may be prompted twice if MFA is enabled.

onedrive_user_enum

onedrive user enumeration - pentest tool to enumerate valid o365 users

ntlmscan

scan for NTLM directories

lyncsmash

locate and attack Lync/Skype for Business

AzureAD_Autologon_Brute

Brute force attack tool for Azure AD Autologon/Seamless SSO - Source: https://arstechnica.com/information-technology/2021/09/new-azure-active-directory-password-brute-forcing-flaw-has-no-fix/

guestlist

tool for identifying guest relationships between companies

nyxgeek-rules

Custom password cracking rules for Hashcat and John the Ripper

dumpsniffer

tools for analyzing strings from password lists

track_the_planet

teamstracker

using graph proxy to monitor teams user presence

imgdevil

quick and dirty proof-of-concept to hide shells in images

weakpass_generator

generates weak passwords based on current date

dirdevil

hiding in plain sight: part 2

username-lists

list of usernames and email addresses for pentests

nyxgeek-wordlists

wordlists for password cracking

twitter-usernames-wordlist

Wordlist compiled from Twitter usernames

rpcfiend

Use rpc null sessions to retrieve machine list, domain admin list, domain controllers

nyxgeek-readinglist

hacker folklore, history, and culture

bad_guest

simple_scanners

simple pentest scanning scripts with no db

f5-cookie-monster

give it a url, will decode f5 cookies to reveal internal IPs

phrack69

mirror of phrack issue 69

classic_hacking_tools

archive of classic hack tools < 2000

graphninja

vulnmgmt

Be alerted ONLY on new vulnerabilities discovered in software you use

h4x0rsearch

list of domains that are included in h4x0rsearch.com

nyxgeek-slides

slide decks etc

exploits

my public exploit code

bashscan

simple bash portscanner using nc

cloudkicker

retrocomputing_resources

collection of old computing stuff

autodiscover_enum

time-based user enum via Basic Auth in Azure

media

images, gifs, movies i've modded or made