blacklanternsecurity/TREVORspray

Using TREVORSpray against ADFS portal

Closed this issue · 1 comments

zeroploitable commented

Hi,

Can I use TREVORSpray In the case where the o365 login page redirects to an adfs login page?

When I tried it the output was showing success for all emails! Is there any way to differentiate the response?

Thank you.

TheTechromancer commented

This should work as long as you have the correct OAUTH URL. I have added a --recon flag to enumerate it.