Attacking Federated Skype for Business with PowerShell

NetSPI describes scraping employee contacts from zoominfo.com for OSINT use, and releases a script that converts gathered names into emails and usernames for phishing and password spraying engagements.

Releases a PowerShell tool that uses Microsoft's userrealm API to enumerate ADFS federated domains, inspired by the Office365 SAML assertion vulnerability research.

Shows how stolen Exchange credentials can be weaponized through malicious Outlook rules that sync via Exchange and trigger a Start Application action, executing payloads without workstation access.

Introduces the linkedin_crawl recon-ng module that spiders the People also Viewed pane on LinkedIn to harvest employee names and titles for phishing lists and password attacks.

Leftover SVN entries files on web servers can disclose hidden pages, config files, and source code. A PowerShell script automates parsing entries files to enumerate exposed directories and files.

A social engineering engagement posed as a journalist seeking comment on an anonymous tip about hazardous waste dumping, showing how OSINT-grounded pretexts lower well-trained executives' guard.