reddit hackernews mail facebook facebook linkedin
Oh365UserFinder

Oh365UserFinder

O365 user enumeration and password spraying tool.

Oh365UserFinder is used for identifying valid o365 accounts and domains without the risk of account lockouts. The tool parses responses to identify the "IfExistsResult" flag is null or not, and responds appropriately if the user is valid. The tool will attempt to identify false positives based on response, and either automatically create a waiting period to allow the throttling value to reset, or warn the user to increase timeouts between attempts.

Oh365UserFinder can also easily identify if a domain exists in o365. This saves the trouble of copying the url from notes and entering it into the URL bar with the target domain.