Skip to content

SprayType_O365

CausticKirbyZ edited this page Apr 17, 2022 · 1 revision

Specifics for Office 365 spraying.

This module sprays against login.microsoft.com. Depending on the result returned it will determine if the credential is valid or not. Microsoft's return information is actually quite detailed. Which allows us to simultaneously do username validation as well as MFA detecion.