Skip to content

Instantly share code, notes, and snippets.

View dextro-gear's full-sized avatar

Abhishek Rajasundaram dextro-gear

View GitHub Profile
@iknowjason
iknowjason / az-enum.sh
Last active September 8, 2025 14:11
Azure Enum & Recon Cheat Sheet
# Start with a DNS domain as seed, and do some recon to check if domain is M365 / Azure tenant hosted
# Insert your domain environment variable below
DOMAIN="microsoft.com"
# Check the getuserrealm.srf endpoint for domain information
# Check autodiscover.$DOMAIN DNS entry
host autodiscover.$DOMAIN
# Note: Checks autodiscover forward lookup ~ you should see a CNAME record for autodiscover.$DOMAIN pointing to autodiscover.otulook.com