Metadata-Version: 2.1
Name: msprobe
Version: 0.1.3
Summary: Finding all things on-prem MS!
Home-page: https://github.com/puzzlpeaches/msprobe
License: BSD 3-Clause
Author: Nicholas A
Author-email: nicholasanastasirepair@gmail.com
Requires-Python: >=3.9,<4.0
Classifier: License :: Other/Proprietary License
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.10
Classifier: Programming Language :: Python :: 3.9
Requires-Dist: bs4 (>=0.0.1,<0.0.2)
Requires-Dist: click (>=8.1.2,<9.0.0)
Requires-Dist: lxml (>=4.8.0,<5.0.0)
Requires-Dist: requests (>=2.27.1,<3.0.0)
Requires-Dist: rich (>=12.2.0,<13.0.0)
Project-URL: Repository, https://github.com/puzzlepeaches/msprobe
Description-Content-Type: text/markdown

# msprobe

+ [About](#about)
+ [Installing](#installing)
+ [Usage](#usage)
+ [Examples](#examples)
+ [Coming Soon](#coming)
+ [Acknowledgements](#acknowledgements)



## About <a name = "about"></a>

Finding all things on-prem Microsoft for password spraying and enumeration. 

The tool will used a list of common subdomains associated with your target apex domain to attempt to discover valid instances of on-prem Microsoft solutions. Screenshots of the tool in action are below:

![FLqt1cWXEAklMP1](https://user-images.githubusercontent.com/8538866/163191875-61040ed3-b318-4ad4-97c1-c06fb3f7eeba.jpeg)

### Installing <a name = "installing"></a>

Install the project using [pipx](https://pypa.github.io/pipx/installation/)

```
pipx install msprobe 
```


## Usage <a name = "usage"></a>

The tool has four different modules that assist with the discovery of on-prem Microsoft products:

* Exchange
* RD Web
* ADFS
* Skype for Business

The help menu and supported modules are shown below:

```
Usage: msprobe [OPTIONS] COMMAND [ARGS]...

  Find Microsoft Exchange, RD Web, ADFS, and Skype instances

Options:
  --help  Show this message and exit.

Commands:
  adfs   Find Microsoft ADFS servers
  exch   Find Microsoft Exchange servers
  full   Find all Microsoft supported by msprobe
  rdp    Find Microsoft RD Web servers
  skype  Find Microsoft Skype servers
```




## Examples <a name = "examples"></a>

Find ADFS servers associated with apex domain:

```
msprobe adfs acme.com
```

Find RD Web servers associated with apex domain with verbose output:

```
msprobe rdp acme.com -v
```

Find all Microsoft products hostsed on-prem for a domain:

```
msprobe full acme.com
```

## Coming Soon <a name = "coming"></a>
- Full wiki for each module
- Fixes for lxml based parsing in RD Web module


## Acknowledgements <a name = "acknowledgements"></a>
- [@p0dalirius](https://twitter.com/intent/follow?screen_name=podalirius_) for [RDWArecon](https://github.com/p0dalirius/RDWArecon) 
- [@b17zr](https://twitter.com/b17zr) for the `ntlm_challenger.py` script
- [@ReverendThing](https://github.com/ReverendThing) for his project [Carnivore](https://github.com/ReverendThing/Carnivore) and it's included subdomains
- [@busterbcook](https://twitter.com/busterbcook) and their tool [msmailprobe](https://github.com/busterb/msmailprobe) heavily influenced the creation of this project 

