{"id":197,"date":"2010-09-03T12:03:10","date_gmt":"2010-09-03T18:03:10","guid":{"rendered":"http:\/\/www.foofus.net\/?page_id=197"},"modified":"2010-09-03T12:03:10","modified_gmt":"2010-09-03T18:03:10","slug":"owa-enumeration-scripts","status":"publish","type":"page","link":"http:\/\/h.foofus.net\/?page_id=197","title":{"rendered":"OWA Enumeration Scripts"},"content":{"rendered":"<p>The following are scripts I&#8217;ve written over the years for testing various versions of Outlook Web Access (OWA). The scripts automate the process of testing logon credentials and enumerating information from the target system&#8217;s address book. It&#8217;s likely that minor tweaks will need to be made to the scripts to work on different versions\/installations of OWA. I typically perform an authentication attempt or query the address book via a web-browser directed through a proxy. If you take a look at the various GET\/POST requests, tweaking the script accordingly should be relatively straight-forward.<\/p>\n<ul>\n<li><a href=\"http:\/\/www.foofus.net\/jmk\/tools\/owa\/OWALogonBrute.pl\">OWA Brute-Force Logon Script<\/a><\/li>\n<li><a href=\"http:\/\/www.foofus.net\/jmk\/tools\/owa\/OWA55EnumUsersURL.pl\">OWA 5.5 URL User Verification<\/a><\/li>\n<li><a href=\"http:\/\/www.foofus.net\/jmk\/tools\/owa\/OWALightFindUsers.pl\">OWA Light Address Book Enumeration<\/a><\/li>\n<li><a href=\"http:\/\/www.foofus.net\/jmk\/tools\/owa\/OWAFindUsers.pl\">OWA Address Book Enumeration<\/a><\/li>\n<li><a href=\"http:\/\/www.foofus.net\/jmk\/tools\/owa\/OWAFindUsersOld.pl\">OWA (older) Address Book Enumeration<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>The following are scripts I&#8217;ve written over the years for testing various versions of Outlook Web Access (OWA). The scripts automate the process of testing logon credentials and enumerating information from the target system&#8217;s address book. It&#8217;s likely that minor tweaks will need to be made to the scripts to work on different versions\/installations of [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":77,"menu_order":0,"comment_status":"open","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-197","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"http:\/\/h.foofus.net\/index.php?rest_route=\/wp\/v2\/pages\/197","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/h.foofus.net\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"http:\/\/h.foofus.net\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"http:\/\/h.foofus.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/h.foofus.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=197"}],"version-history":[{"count":0,"href":"http:\/\/h.foofus.net\/index.php?rest_route=\/wp\/v2\/pages\/197\/revisions"}],"up":[{"embeddable":true,"href":"http:\/\/h.foofus.net\/index.php?rest_route=\/wp\/v2\/pages\/77"}],"wp:attachment":[{"href":"http:\/\/h.foofus.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=197"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}