-
o365enum
Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover v1, or office.com login page.
-
InfluxDB
Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
So essentially it’s a process where an attacker is able to automate the process of authenticating to an application that is linked to preferably AD(Active Directory). The attacker then selects a password such as “Winter2021!” to test against a list of valid email accounts or usernames that are either collected from a site like LinkedIn or a company directly. When using linked in I use more tools such as O365Enum to validate that I have proper email credentials.
Related posts
-
gremwell/o365enum - Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover v1, or office.com login page.
-
Santa: A binary authorization and monitoring system for macOS
-
How Do I Prepare My Phone for a Protest?
-
Simplifying Keycloak Configuration with Terraform and Terragrunt
-
Critical OpenVPN Zero-Day Flaws