External Pentest Playbook
Rules of Engagement
Verifying the scope
Kicking OFF
Vulnerability Scanning
Nessus or OpenVAS
Information Gathering / OSINT
Hunting breached credentials
Find breached credentials and check for bad password policy patterns
Breach Parse tool A tool for parsing breached passwords
Enumerating Valid Accounts
Forgot password and see if email exists.
Analyse password policy to know if its worth to spray passwords.
Attacking Login Portals
Password Spraying
Office 365 email sprayer
Burp Suite
Grab the request and perform a spider attack using the intruder tab
MFA Bypassing
PowerShell script that attempts to log in to various Microsoft services using a provided set of credentials and will attempt to identify if MFA is enabled.