A password spraying tool for Microsoft Online accounts (Azure/O365).
Installation
Download newest release from Github.com
Usage
Import-Module MSOLSpray.ps1
Invoke-MSOLSpray -UserList .\userlist.txt -Password Winter2020
Flags
UserList - UserList file filled with usernames one-per-line in the format "[email protected]"
Password - A single password that will be used to perform the password spray.
OutFile - A file to output valid results to.
Force - Forces the spray to continue and not stop when multiple account lockouts are detected.
URL - The URL to spray against. Potentially useful if pointing at an API Gateway URL generated with something like FireProx to randomize the IP address you are authenticating from.