Go365 v2.0 - Office365 User Attack Tool

[itsMe]

Go365 is a tool designed to perform user enumeration* and password guessing attacks on organizations that use Office365 (now/soon Microsoft365). Go365 uses a unique SOAP API endpoint on login.microsoftonline.com that most other tools do not use. When queried with an email address and password, the endpoint responds with an Azure AD Authentication and Authorization code. This code is then processed by Go365 and the result is printed to a screen or an output file.

* User enumeration is performed in conjunction with a password guess attempt. Thus, there is no specific flag or functionality to perform only user enumeration. Instead, conduct your first password guessing attack, then parse the results for valid users.

Changelog v2.0

    7c2148e Bug notice temporary note
    984b80e Update README.md
    97f02b1 v2.0
    aacf804 v2.0

To see this hidden content, you must like this content.