https://github.com/p0dalirius/owabrute

Hydra wrapper for bruteforcing Microsoft Outlook Web Application.
https://github.com/p0dalirius/owabrute

hydra outlook pentest pentest-tool tool

Last synced: about 1 month ago
JSON representation

Hydra wrapper for bruteforcing Microsoft Outlook Web Application.

• Host: GitHub
• URL: https://github.com/p0dalirius/owabrute
• Owner: p0dalirius
• License: gpl-3.0
• Created: 2021-02-18T16:28:26.000Z (almost 4 years ago)
• Default Branch: main
• Last Pushed: 2023-10-02T07:37:16.000Z (over 1 year ago)
• Last Synced: 2024-12-18T18:45:28.785Z (about 2 months ago)
• Topics: hydra, outlook, pentest, pentest-tool, tool
• Language: Shell
• Homepage: https://podalirius.net/
• Size: 30.3 KB
• Stars: 65
• Watchers: 4
• Forks: 14
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • Funding: .github/FUNDING.yml
  • License: LICENSE

Awesome Lists containing this project

README

        
![](./.github/banner.png)



  Hydra wrapper for bruteforcing Microsoft Outlook Web Application.

  


  

  

  

  




## Dependencies

This script is based on `hydra`. You can install it with :

```

apt install hydra

```

## Usage

```

bash$ ./owabrute.sh -h

Usage : ./owabrute.sh

      -d DOMAIN    : Target domain. Example : remote.targethost.co.uk

      -u USERSLIST : Path to wordlist of users to test

      -p PASSLIST  : Path to wordlist of passwords to test

```

## Examples

Usage example against a test domain `test.domain.net` with `./users.txt` and `./passwords.txt` wordlists :

```

./owabrute.sh -d test.domain.net -u ./users.txt -p ./passwords.txt

```

If the files cannot be accessed, you will have a message indicating `Could not access ressource` :

```

bash$ ./owabrute.sh -d test.domain.net -u ./users.txt -p ./passwords.txt

 ██████╗ ██╗    ██╗ █████╗     ██████╗ ██████╗ ██╗   ██╗████████╗███████╗

██╔═══██╗██║    ██║██╔══██╗    ██╔══██╗██╔══██╗██║   ██║╚══██╔══╝██╔════╝

██║   ██║██║ █╗ ██║███████║    ██████╔╝██████╔╝██║   ██║   ██║   █████╗

██║   ██║██║███╗██║██╔══██║    ██╔══██╗██╔══██╗██║   ██║   ██║   ██╔══╝

╚██████╔╝╚███╔███╔╝██║  ██║    ██████╔╝██║  ██║╚██████╔╝   ██║   ███████╗

 ╚═════╝  ╚══╝╚══╝ ╚═╝  ╚═╝    ╚═════╝ ╚═╝  ╚═╝ ╚═════╝    ╚═╝   ╚══════╝

Hydra wrapper for bruteforcing Microsoft OWA.

DOMAIN    : test.domain.net

USERSLIST : ./users.txt

PASSLIST  : ./passwords.txt (Could not access ressource)

[WARN] Some resources could not be accessed. Aborting...

```

## Additional references

 - https://stedotmartin.wordpress.com/2014/05/13/bruteforce-microsoft-exchange-2013-owa-with-hydra/