
Awesome-BEC
Repository of attack and defensive information for Business Email Compromise investigations

Repository of attack and defensive information for Business Email Compromise investigations

Modular password sprayer with SSH proxy rotation, MFA bypass, and domain recon. Supports O365, ADFS, OWA, Okta, Cisco VPN. Automates credential…

Cross-platform framework for enumerating O365 accounts, password spraying, exfiltrating emails/Teams/OneDrive data, and backdooring EntraID accounts…

Enumerates valid Microsoft 365 accounts and domains via response analysis, with password spraying support and throttling detection to avoid lockouts.

User enumeration and password bruteforce on Azure, ADFS, OWA, O365, Teams and gather emails on Linkedin

onedrive user enumeration - pentest tool to enumerate valid o365 users

Powershell Based tool for gathering information related to O365 intrusions and potential Breaches

Username enumeration and password spraying tool aimed at Microsoft O365.


A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365

User enumeration and password spraying tool for testing Azure AD