Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/luddekn/o365-user-enum

Microsoft username enumeration!
https://github.com/luddekn/o365-user-enum

Last synced: 7 days ago
JSON representation

Microsoft username enumeration!

Awesome Lists containing this project

README 

        
*Proof of Concept for educational purposes only!*



## About

During a webinar hosted by [Kovert](https://www.linkedin.com/events/hvordanvibryterossinnisky-intro7176497881669935104/comments/) on enumeration and password guessing for the cloud, in this case specifically for Azure and Office 365, I found it specifically interesting to learn that Microsoft has overlooked the aspect of username enumeration completely since they do not consider it necessary. Username enumeration might not be the most important aspect to secure since it would not grant you access right away, but it would definitely speed up the process of gaining access to user accounts, and with user passwords still being insufficient knowing the existence of user accounts becomes crucial in my opinion! And that's exactly the purpose of this little Python script, to simply automate the process of finding user accounts. Now, there are probably a ton of scripts out there that do this process better than mine, I just created my version to see how it works and decided to share it.

## Installation

First, clone the repository:

```

git clone https://github.com/luddekn/O365-user-enum.git

```

Secondly, run the requirements.txt file to install the necessary packages used in this script:

```

pip3 install -r requirements.txt

```

## Usage

You would need a wordlist of potential email addresses or usernames you want to test, you could build your own using Python or find lists online:

```

python3 microsoft-username-enum.py -w wordlist.txt

```