iomoath / PyExchangePasswordSpray

Microsoft Exchange password spray tool with proxy support.

PyExchangePasswordSpray

Microsoft Exchange password spraying tool with proxy capabilities.

Features

• Proxy List Support . HTTP & HTTPS
• Set a delay between each password spray.
• Use user & password list from a txt file
• Multi-threading support

Usage

$ python3 exchange_password_spray.py -U userlist.txt -P password.txt --url https://webmail.example.org/EWS/Exchange.asmx --delay 62 -T 1 -ua "Microsoft Office/16.0 (Windows NT 10.0; MAPI 16.0.9001; Pro)" -O result.txt -v

##################### AUTH URLs samples #####################

# https://webmail.example.org/mapi/
# https://webmail.example.org/EWS/Exchange.asmx
# https://mail.example.org/autodiscover/autodiscover.xml

Proxy Setups

Put your proxy list in proxy.txt file with the format IP:PORT

Screenshots

Meta

Article link: https://c99.sh/microsoft-exchange-password-spraying/

Moath Maharmeh - [e-mail]

https://github.com/iomoath/PyExchangePasswordSpray