onedrive user enumeration - pentest tool to enumerate valid o365 users

VPN Overall Reconnaissance, Testing, Enumeration and eXploitation Toolkit

locate and attack Lync/Skype for Business

Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover v1, or office.com login page.

User Enumeration of Microsoft Teams users via API

SMTP user enumeration via VRFY, EXPN and RCPT with clever timeout, retry and reconnect functionality.

Brute force attack tool for Azure AD Autologon/Seamless SSO - Source: https://arstechnica.com/information-technology/2021/09/new-azure-active-directory-password-brute-forcing-flaw-has-no-fix/

SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing

📧 Enumerate usernames through SMTP service

GitIntel is a robust GitHub OSINT tool crafted to reveal concealed insights from GitHub repositories and user profiles. Its capabilities make it an invaluable resource for ethical hacking, security assessments, and intelligence gathering in the realm of software development.

ssh user enumeration

A PoC exploit for CVE-2017-5487 - WordPress User Enumeration.

A PoC exploit for CVE-2021-4191 - GitLab User Enumeration.

Don't have a professional version of BurpSuite? It doesn 't matter . I wrote scripts to solve their labs.

PowerBI Extractor is a fully open-source auditing and exploration tool for Microsoft Power BI environments, it performs deep metadata extraction, access control validation, user-role mapping, and optional DAX/report export operations.

A sophisticated Joomla administrator brute force tool for security testing and penetration testing purposes.

Esta es una utilidad que he creado con el fin único de enumerar usuarios de plataformas WordPress a través del panel de login que estos traen.

Solve PortSwigger Lab without BurpSuite Pro