A few days ago, I created a tool called o365discover to reconnaissance Office 365 users for penetration testing. Using this tool, you can easily check whether a lot of users exist or not on Office 365. Off course, I know there are some similar and famous tools like o365creeper. However, most of these tools are slow because they does not support parallel execution. Therefore, I have implemented paralell execution by goroutine of golang. However, I'm not familiar with golang. Please feel free to advise me!
Next, It's time to explain how to use. However, the way to use is very simple. If the given username does not exist, this tool does not display any result. This tool displays only valid usernames.
$ o365discover -u valid@example.com
valid@example.com
$ o365discover -u invalid@example.com # nothing
$ o365discover -f emails.txt
Finally, You can download the binary from this URL
https://github.com/owlinux1000/o365discover/releases/tag/v1.0.1
Also you can install with go command.
go install github.com/owlinux1000/o365discover@latest
Please try it!
Note
This tool is offered with no warranty and is to be used at your own risk and discretion.
Top comments (0)