---
id: 8165
title: "Targeting Passwords for Managed and Federated Microsoft Accounts"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/cloud-pentesting/targeting-passwords-managed-federated-microsoft-accounts/"
published_at: "2017-05-02T00:00:00Z"
tags: ["cloud", "recon", "brute-force", "azure-ad", "password-spraying", "adfs", "office365"]
phying_url: "https://phying.com/item/8165"
lang: en
---

# Targeting Passwords for Managed and Federated Microsoft Accounts

## Summary

Releases Invoke-ExternalDomainBruteforce, which detects whether a Microsoft domain is managed or federated, picks the right authentication flow, and automates password guessing against O365 and ADFS.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2017-05-02T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/cloud-pentesting/targeting-passwords-managed-federated-microsoft-accounts/
- **Phying News:** https://phying.com/item/8165