Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
outlook-auto-register — Automated Outlook account registration tool using pure HTTP protocol with PerimeterX captcha solving, proxy pool management, and email token retrieval for bulk account creation. | Kitploit
Tools/GitHubGitHub/lxf746/outlook-auto-register
Web SecurityCAPTCHA BypassEmail Security
GitHublxf746/outlook-auto-register

outlook-auto-register

Automated Outlook account registration tool using pure HTTP protocol with PerimeterX captcha solving, proxy pool management, and email token retrieval for bulk account creation.

View Repository
57927793 days agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Outlook Auto Register

Pure-protocol Microsoft Outlook bulk registration · PerimeterX solver · Web console · Proxy pool / account pool / liveness checks

Stars Release Forks License

What it solves  ·  Screenshots  ·  Quick start  ·  Anti-ban guide  ·  中文  ·  Tiếng Việt

Outlook batch registration live log

Repository:

lxf746/outlook-auto-register

For learning and research only. Not for commercial misuse. You are responsible for complying with Microsoft Terms of Service and any consequences of use.

In one line: Pure-protocol Outlook bulk registration + web console — from PX solving and proofs binding to Graph mail verification, fully visualized.

What it solves

Most Outlook registration scripts only answer “how to send HTTP requests”. Gaps remain: PerimeterX, proxy rotation, recovery-mail proofs, post-registration token usage, batch ops, and liveness checks. This project wires the full pipeline.

Typical scriptsOutlook Auto Register
ImplementationBrowser automation / partial protocolPure HTTP (Fluent Web API + PX solver), no browser
CaptchaManual / single vendorcaptcha.run press/silent; CapSolver / EzCaptcha supported
ProxySingle HTTP_PROXYSQLite proxy pool: health check, success stats, sticky binding
ProofsOften skipped (high ban rate)External IMAP recovery pool / Cloudflare catch-all
OutputPlain text credentials4-segment / 6-segment combo + SQLite storage
OperationsNoneWeb console: batch register, account pool, liveness, keepalive
Mail readIMAP-dependentGraph / Outlook REST / Thunderbird scopes

At a glance

Batch registration — live log + progress

Configure on the left; SSE stream on the right: proxy check → PX → CreateAccount → proofs → Graph-readable token. Per-batch timing summary at the bottom.

Batch registration

IMAP / keepalive — token refresh + mail verify

Routes by scope to Graph / Outlook REST / IMAP; supports batch keepalive and read-mail self-check.

IMAP keepalive

Core capabilities

Registration

  • Pure protocol: OAuth PKCE → signup.live.com → CheckAvailableSigninName → two-step risk/verify → CreateAccount → slt login → proofs → mail OAuth
  • PX solver: Protocol PerimeterX + captcha.run press/silent fallback
  • Seller-style output: lowercase username 10–12 chars, lowercase+digits password 11–14, random US/UK names
  • Recovery proofs: IMAP pool / Cloudflare cf_domain; no default skip

Operations

  • Web console: batch jobs, SSE logs, dry-run toggle
  • Proxy pool: SQLite, health checks, success curves, sticky binding
  • Account pool: status, combo export, batch liveness
  • Keepalive: periodic refresh_token renewal + mail verify

Captcha & mail

  • captcha.run (recommended) / CapSolver / EzCaptcha
  • Recovery: IMAP pool / CF Worker temp mail
  • Captcha key prefers SQLite (web UI); .env as fallback

Registration flow

root@kitploit:~
OAuth login (PKCE)
  → signup.live.com/signup (parse ServerData)
  → CheckAvailableSigninName
  → risk/initialize
  → humanSensorUrl + PX collector preload
  → risk/verify #1 (px metadata + msaRiskVerifySignature)
  → [riskChallengeRequired] captcha.run press/silent
  → risk/verify #2 (challengeSolution + px metadata)
  → CreateAccount
  → oauth20_authorize.srf (slt login)
  → [proofs] external recovery / CF catch-all / (OUTLOOK_SKIP_PROOFS=1 to cancel)
  → [optional] skip Passkey / obtain mail OAuth refresh_token

Quick start

Requirements

  • Python 3.11+
  • Residential proxy (required; country must match proxy exit)
  • captcha.run API key (recommended)

Install

root@kitploit:~
git clone https://github.com/lxf746/outlook-auto-register.git
cd outlook-auto-register

python3 -m venv .venv && source .venv/bin/activate
pip install -r requirements.txt

cp .env.example .env
# Edit .env: recovery pool, CF domain, etc. (captcha key recommended via web UI → DB)

Web console (recommended)

root@kitploit:~
.venv/bin/uvicorn webapp.server:app --host 0.0.0.0 --port 8890

Open http://127.0.0.1:8890:

  1. Proxy pool — add residential proxies (host:port:user:pass or {sid} rotating template)
  2. Batch register — captcha.run key → output format → disable dry-run → start
  3. Account pool — view / export combos

Dry-run is on by default on first use. Uncheck before real registration.

CLI

root@kitploit:~
OUTLOOK_MAIL_TOKEN_MODE=login_exe python main.py \
  --proxy 'gate.example.com:1000:user:pass-US-{sid}' \
  --country US -v

REG_PROXY_RETRIES=6 python main.py --count 10 --concurrency 2 \
  --country US --proxy 'gate.example.com:1000:user:pass-US-{sid}' -v

python main.py --skip-login
python main.py --no-mail-token

Captcha self-test

root@kitploit:~
python scripts/ez_selftest.py
python scripts/captcha_run_selftest.py

Output formats

ModeFormatDescription
graph4-segmentemail----password----client_id----refresh_token
graph_recovery / login_exe6-segmentabove + recovery_email----recovery_password (recommended)
dual6-segmentabove + login_client_id----login_refresh_token

Configuration

Mail token mode (OUTLOOK_MAIL_TOKEN_MODE)

ModeDescription
graphGraph API mail read
outlook_restOutlook REST API
login_exe / recoveryThunderbird scopes (seller-style)
dualDual tokens: Graph + login SSO

Recovery / proofs

root@kitploit:~
OUTLOOK_RECOVERY_BACKEND=imap
OUTLOOK_EXTERNAL_RECOVERY_POOL_FILE=/path/recovery_pool.txt
OUTLOOK_RECOVERY_IMAP_HOST=imap.your-recovery-host.com

OUTLOOK_RECOVERY_BACKEND=cf_domain
OUTLOOK_CF_DOMAIN=your-domain.com
OUTLOOK_CF_WORKER_API_URL=https://apimail.your-domain.com

Do not bulk-skip proofs in production (OUTLOOK_SKIP_PROOFS=1 is debug-only).

Environment variables

VariableDescription
CAPTCHA_RUN_API_KEYcaptcha.run Bearer key (DB via web UI preferred)
HTTP_PROXYCLI proxy fallback
OUTLOOK_MAIL_TOKEN_MODEgraph / login_exe / outlook_rest / dual
OUTLOOK_RECOVERY_BACKENDimap / cf_domain
OUTLOOK_SKIP_PROOFS1 allows cancel skip (default 0)

See .env.example for the full list.

Project layout

root@kitploit:~
outlook-auto-register/
├── main.py
├── outlook_api_reg/
├── px_solver/
├── webapp/
├── scripts/
├── assets/screenshots/
└── accounts/          # generated data (gitignored)

Notes

  1. Residential proxy required; match --country to proxy region
  2. Do not hammer the same session — risk of AADSTS7005106 riskBlock
  3. PX mode is solver only (protocol + captcha.run)
  4. Configure recovery pool before real registration
  5. Concurrency 1–2, 3–8s jitter between accounts — see ANTIBAN.md

Anti-ban

See scripts/ANTIBAN.md.

Links

LinkDescription
QQ Group 1040827527Community chat
LINUX DOCommunity discussion
中文 · Tiếng ViệtTranslations

Star History

Star History Chart

If this project helps you, consider leaving a ⭐. If the chart shows a GitHub API restriction message, that is a temporary star-history.com issue — not a problem with this repo.

License

GPL-3.0

Download Tool