ExchangeFinder: find Micrsoft Exchange instance
ExchangeFinder
ExchangeFinder is a simple and open-source tool that tries to find Microsoft Exchange instance for a given domain based on the top common DNS names for Microsoft Exchange.
ExchangeFinder can identify the exact version of Microsoft Exchange starting from Microsoft Exchange 4.0 to Microsoft Exchange Server 2019.
How does it work?
ExchangeFinder will first try to resolve any subdomain that is commonly used for the Exchange server, then it will send a couple of HTTP requests to parse the content of the response sent by the server to identify if it’s using Microsoft Exchange or not.
Currently, the tool has a signature of every version from Microsoft Exchange starting from Microsoft Exchange 4.0 to Microsoft Exchange Server 2019 and based on the build version sent by Exchange via the header X-OWA-Version we can identify the exact version.
If the tool found a valid Microsoft Exchange instance, it will return the following results:
- Domain name.
- Microsoft Exchange version.
- Login page.
- Web server version.
Install
Clone the latest version of ExchangeFinder using the following command:
git clone https://github.com/mhaskar/ExchangeFinder
And then install all the requirements using the command poetry install.
Use
You can use the option -h to show the help banner:
Scan single domain
To scan a single domain you can use the option –domain like the following:
python3 exchangefinder.py –domain dummyexchangetarget.com
Scan multiple domains
To scan multiple domains (targets) you can use the option –domains and choose a file like the following:
python3 exchangefinder.py –domains domains.txt
Copyright (C) 2022 mhaskar
Source: https://github.com/mhaskar/
