Carnivore: Microsoft External Attack Tool

Carnivore – Microsoft External Attack Tool

Overview: Carnivore is an assessment tool for Skype for Business, Exchange, ADFS, and RDWeb servers as well as some O365 functionality. Carnivore includes some new post-authentication Skype for Business functionality.

In general, the tabs will unlock in-line with what functionality you can use. Ie – the post auth options will unlock after you have discovered valid credentials.

Feature

• Subdomain Enumeration
• Username Enumeration
  • Smart Enumeration
    • 9 lists of statistically likely usernames
    • Automatically selects likely format
  • Legacy vs Modern Format
  • NEVTEK\jsmith
  • jsmith@nevtek.nev
• Password Spraying
  • Discovered Format
  •  Pre-built lists
• Post Compromise
• O365

Demo

Download

Author: Developed by Chris Nevin, chris.nevin@nccgroup.com