DEV Community

Chihiro Hasegawa
Chihiro Hasegawa

Posted on

2 2

A new tool for recon Office365 users

A few days ago, I created a tool called o365discover to reconnaissance Office 365 users for penetration testing. Using this tool, you can easily check whether a lot of users exist or not on Office 365. Off course, I know there are some similar and famous tools like o365creeper. However, most of these tools are slow because they does not support parallel execution. Therefore, I have implemented paralell execution by goroutine of golang. However, I'm not familiar with golang. Please feel free to advise me!

Next, It's time to explain how to use. However, the way to use is very simple. If the given username does not exist, this tool does not display any result. This tool displays only valid usernames.

$ o365discover -u valid@example.com
valid@example.com
$ o365discover -u invalid@example.com # nothing
$ o365discover -f emails.txt
Enter fullscreen mode Exit fullscreen mode

Finally, You can download the binary from this URL
https://github.com/owlinux1000/o365discover/releases/tag/v1.0.1

Also you can install with go command.
go install github.com/owlinux1000/o365discover@latest

Please try it!

Note

This tool is offered with no warranty and is to be used at your own risk and discretion.

Sentry image

See why 4M developers consider Sentry, “not bad.”

Fixing code doesn’t have to be the worst part of your day. Learn how Sentry can help.

Learn more

Top comments (0)

Image of Docusign

🛠️ Bring your solution into Docusign. Reach over 1.6M customers.

Docusign is now extensible. Overcome challenges with disconnected products and inaccessible data by bringing your solutions into Docusign and publishing to 1.6M customers in the App Center.

Learn more