Sign up to save your podcasts
Or
Share Attacking Exchange/OWA to Gain Access to AD Accounts - Tradecraft Security Weekly #3
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
Attacking Exchange/OWA to Gain Access to AD Accounts - Tradecraft Security Weekly #3
Microsoft Exchange and Office365 are extremely popular products that organizations use for enterprise email. These services can be exploited by remote attackers to potentially gain access to Active Directory user credentials. In this Tradecraft Security Weekly episode Beau Bullock (@dafthack) demonstrates how to utilize MailSniper to enumerate internal domains, enumerate usernames, perform password spraying attacks, and get the global address list from Exchange and Office365 portals.
Links: MailSniper - https://github.com/dafthack/MailSniper
View all episodes
By Security Weekly
5
44 ratings
Microsoft Exchange and Office365 are extremely popular products that organizations use for enterprise email. These services can be exploited by remote attackers to potentially gain access to Active Directory user credentials. In this Tradecraft Security Weekly episode Beau Bullock (@dafthack) demonstrates how to utilize MailSniper to enumerate internal domains, enumerate usernames, perform password spraying attacks, and get the global address list from Exchange and Office365 portals.
Links: MailSniper - https://github.com/dafthack/MailSniper