Oh365UserFinder is used for identifying valid o365 accounts without the risk of account lockouts.

Last update: Jan 02, 2023

Overview

Oh365 User Finder

Oh365UserFinder is used for identifying valid o365 accounts without the risk of account lockouts. The tool parses responses to identify the "IfExistsResult" flag is null or not, and responds appropriately if the user is valid.

Usage

Installing Oh365UserFinder

git clone https://github.com/dievus/Oh365UserFinder.git

Change directories to Oh365UserFinder and run:

pip3 install -r requirements.txt

This will run the install script to add necessary dependencies to your system.

python3 Oh365UserFinder.py -h

This will output the help menu, which contains the following flags:

-h, --help - Lists the help options

-e, --email - Required for running Oh365UserFinder against a single email account

-r, --read - Reads from a text file containing emails (ex. -r emails.txt)

-w, --write - Writes valid emails to a text document (ex. -w validemails.txt)

-t, --threading - Sets a pause between attempts in seconds (ex. -t 60)

-v, --verbose - Outputs test verbosely; note that you must use y to run verbosely (ex. -v y)

Examples of full commands include:

python3 o365UserFinder.py -e [email protected]

python3 Oh365UserFinder.py -r emails.txt -w validemails.txt

python3 Oh365UserFinder.py -r emails.txt -w validemails.txt -t 30 -v y

Notes

Make note that Microsoft does have some defense in place that can, from time to time, provide false positives in feedback. If you suspect that this is occurring take a pause in testing, and return and increase the duration between attempts using the -t flag.

Acknowledgements

This project is based on a previous tool named o365Creeper developed by Korey Mckinley that was last supported in 2019, and developed in Python2.

Comments

Invalid 'NoneType' argument for int() function
Hi @dievus , first I want to thank you for the great tool.

As shown in the images below, when using the tool without the -l / --lockout argument, after a LOCKOUT occurrence, an exception occurs that breaks the password spray flow.

Error :

No Error:

This error occurs because on line 276, the -l / --lockout argument is multiplied by the integer value 60. If the parameter is not defined by the user, the type of the 'lockout' variable is defined as NoneType, which by in turn, it cannot receive arithmetic operations with an integer value, causing the error.

Suggestions:

[x] Create a condition that checks if the -l or --lockout argument was defined by the user at script execution, otherwise it sets a default value (1 maybe) or returns to the help menu and 'forces' the user to use the -l / --lockout argument.
opened by FroydCod3r 3
Enhancement - check whether the IP address is being throttled

The results may get throttled - in that case you'll be returned with false positives (i.e. it always returns "IfExistsResults":0). You can check throttle by looking whether "ThrottleStatus":1.

If would be nice to return a warning in this case.
enhancement good first issue

opened by tautology0 3
Domain Check - Unknown, Managed, Federated

https://github.com/dievus/Oh365UserFinder/blob/main/oh365userfinder.py#L204 valid_response = re.search('"NameSpaceType":"Managed",', response)

Microsoft outline that there are different namespace types besides Unknown and Managed. As far as I can tell, there is also, Federated which can be seen here for my local university. https://login.microsoftonline.com/[email protected]

Potentially consider that the regex should check for the word Unknown and change the response to a negative if returned true.

opened by ILightThings 2
invalid email cache & sleep on throttle
Keep record of invalid emails and skip if an email has already been deemed invalid

When throttling is enabled, sleep and then retry

Appends domain if specified (for use with wordlists without email domain)
opened by chrismeistre 1
Add a shebang so we can be lazy

The script doesn't have the traditional shebang of: #!/usr/bin/env python3

So it can't be directly run from the shell. Any chance this could be added to help us lazy people?
enhancement

opened by tautology0 1

Releases(v1.1.0)

v1.1.0(Jun 25, 2022)

v1.1.0 includes password spraying.
Source code(tar.gz)
Source code(zip)
oh365userfinder.py(17.65 KB)
requirements.txt(33 bytes)
v1.0.1(Nov 22, 2021)

Source code(tar.gz)
Source code(zip)
Oh365UserFinder.exe(9.38 MB)
v1.0.0(Nov 17, 2021)

Source code(tar.gz)
Source code(zip)
Oh365UserFinder.exe(9.38 MB)

Owner

Joe Helle

Also known as the Mayor

GitHub Repository

Sonoff NSPanel protocol and hacking information. Tasmota Berry driver for NSPanel

NSPanel Hacking Sonoff NSPanel protocol and hacking information and Tasmota Berry driver. NSPanel protocol manual Tasmota driver nspanel.be Installati

98 Dec 26, 2022

Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.

GoodHound ______ ____ __ __ / ____/___ ____ ____/ / / / /___ __ ______ ____/ / / / __/ __ \/ __ \/ __

352 Jan 02, 2023

CVE-2021-44228 log4j 2.x rce漏洞检测工具

#1 使用说明 CVE-2021-44228 log4j 2.x rce漏洞检测工具，对目标链接发起get请求并利用dnslog探测是否有回显 $ python3 log4j-scan.py -h

4 Jan 13, 2022

This program will brute force any Instagram account you send it its way given a list of proxies.

Instagram Bruter This program will brute force any Instagram account you send it its way given a list of proxies. NOTICE I'm no longer maintaining thi

1 Nov 15, 2021

An automated, reliable scanner for the Log4Shell (CVE-2021-44228) vulnerability.

Log4JHunt An automated, reliable scanner for the Log4Shell CVE-2021-44228 vulnerability. Video demo: Usage Here the help usage: $ python3 log4jhunt.py

39 Nov 21, 2022

Dlint is a tool for encouraging best coding practices and helping ensure Python code is secure.

Dlint Dlint is a tool for encouraging best coding practices and helping ensure Python code is secure. The most important thing I have done as a progra

127 Dec 27, 2022

Password list generator for password spraying - prebaked with goodies

Generates permutations of Months, Seasons, Years, Sports Teams (NFL, NBA, MLB, NHL), Sports Scores, "Password", and even Iterable Keyspaces of a specified size.

65 Dec 22, 2022

This exploit allows to connect to the remote RemoteMouse 3.008 service to virtually press arbitrary keys and execute code on the machine.

RemoteMouse-3.008-Exploit The RemoteMouse application is a program for remotely controlling a computer from a phone or tablet. This exploit allows to

25 Dec 04, 2022

This is a partial and quick and dirty proof of concept implementation of the following specifications to configure a tor client to use trusted exit relays only.

This is a partial and quick and dirty proof of concept implementation of the following specifications to configure a tor client to use trusted exit re

22 Nov 09, 2022

Oh365UserFinder is used for identifying valid o365 accounts without the risk of account lockouts.

Related tags

Overview

Oh365 User Finder

Usage

Notes

Acknowledgements

Comments

Invalid 'NoneType' argument for int() function

Enhancement - check whether the IP address is being throttled

Domain Check - Unknown, Managed, Federated

invalid email cache & sleep on throttle

Add a shebang so we can be lazy

Releases(v1.1.0)

v1.1.0(Jun 25, 2022)

v1.0.1(Nov 22, 2021)

v1.0.0(Nov 17, 2021)

Owner

Joe Helle

Sonoff NSPanel protocol and hacking information. Tasmota Berry driver for NSPanel

Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.

CVE-2021-44228 log4j 2.x rce漏洞检测工具

This program will brute force any Instagram account you send it its way given a list of proxies.

An automated, reliable scanner for the Log4Shell (CVE-2021-44228) vulnerability.

Dlint is a tool for encouraging best coding practices and helping ensure Python code is secure.

Password list generator for password spraying - prebaked with goodies

This exploit allows to connect to the remote RemoteMouse 3.008 service to virtually press arbitrary keys and execute code on the machine.

This is a partial and quick and dirty proof of concept implementation of the following specifications to configure a tor client to use trusted exit relays only.

Discord Token Stealer Malware Protection

On-demand scanning for container registries

Crowbar - A windows post exploitation tool

Yesitsme - Simple OSINT script to find Instagram profiles by name and e-mail/phone

Python script that sends CVE-2021-44228 log4j payload requests to url list

Polkit - Local Privilege Escalation (CVE-2021-3560)

Tools Crack Fb Terbaru

Mass scan for .git repository and .env file exposure

BETA: Layla - recon tool for bug bounty

Python Password Generator

A traceroute tool that also displays IP information