CoCalc Logo Icon
StoreFeaturesDocsShareSupportNewsAboutSign UpSign In
rapid7

CoCalc provides the best real-time collaborative environment for Jupyter Notebooks, LaTeX documents, and SageMath, scalable from individual users to large groups and classes!

GitHub Repository: rapid7/metasploit-framework
Path: blob/master/documentation/modules/auxiliary/scanner/msmail/exchange_enum.md
Views: 1904

OWA (Outlook Webapp) is vulnerable to time-based user enumeration attacks. This module leverages all known, and even some lesser-known services exposed by default Exchange installations to enumerate email.

Error-based user enumeration for Office 365 integrated email addresses

Verification Steps

  • Start msfconsole

  • use auxiliary/scanner/msmail/exchange_enum

  • set (EMAILorEMAIL_FILE)

  • run

  • creds

Results should look something like below if valid users were found:

host origin service public private realm private_type ---- ------ ------- ------ ------- ----- ------------ <ip> <ip> 443/tcp (owa) [email protected]