thumbscr-ews – a python EWS tool
ID: 62b444a0-c616-56a6-8081-82f1900e2674
STIX ID: report--62b444a0-c616-56a6-8081-82f1900e2674
Feed Name: SensePost Blog
This post details thumbscr-ews, a Python tool built on exchangelib to test and exploit misconfigured Exchange Web Services that allow MFA bypass, adding features like GAL enumeration, delegated access checks, mailbox search/reading, attachment downloads, folder browsing, and limited brute forcing, with references to prior EWS MFA-bypass research and related tools.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.