user-enumeration 开源项目推荐（50 个）

WebBreacher /WhatsMyName

由700多个网站组成的社区维护的数据集，可按用户名查找帐户-支持Osint和数字足迹工具。

nyxgeek /onedrive_user_enum

onedrive user enumeration - pentest tool to enumerate valid o365 users

nyxgeek /o365recon

retrieve information via O365 and AzureAD with a valid cred

klezVirus /vortex

VPN Overall Reconnaissance, Testing, Enumeration and eXploitation Toolkit

nyxgeek /lyncsmash

定位并攻击Lync/Skype for Business。

gremwell /o365enum

Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover v1, or office.com login page.

lucidra-security /TeamsEnum

User Enumeration of Microsoft Teams users via API

cytopia /smtp-user-enum

通过VRFY、EXPN和RCPT实现SMTP用户枚举，并具备巧妙的超时、重试和重连功能。

nyxgeek /AzureAD_Autologon_Brute

Brute force attack tool for Azure AD Autologon/Seamless SSO - Source: https://arstechnica.com/information-technology/2021/09/new-azure-active-directory-password-brute-forcing-flaw-has-no-fix/

Keramas /mssqli-duet

SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing

benbusby /namebuster

A tool for enumerating usernames from text, files, or websites

JoniRinta-Kahila /WPCracker

WordPress pentest tool

AnonKryptiQuz /GitIntel

GitIntel is a robust GitHub OSINT tool crafted to reveal concealed insights from GitHub repositories and user profiles. Its capabilities make it an invaluable resource for ethical hacking, security assessments, and intelligence gathering in the realm of software development.

chrispetrou /smtp_enum_users

📧 Enumerate usernames through SMTP service

MrTuxx /aad-sso-enum-brute-spray

Proof of Concept in Go from Secureworks' research on Azure Active Directory Brute-Force Attacks. Inspired by @treebuilder's POC on PowerShell.

W-GOULD /ssh-user-enumeration

ssh user enumeration

tmenochet /PowerSpray

Offensive tool for guessing Active Directory credentials via Kerberos

0xricksanchez /SMTPeek

High-performance, concurrent SMTP user validation

mgm-sp /wp-author-security

Wordpress plugin to stop user enumeration on author pages.

Wiiz4rD /Portswigger-Labs

Don't have a professional version of BurpSuite? It doesn 't matter . I wrote scripts to solve their labs.