Hackers Bruteforce Passwords to Microsoft Online

Hackers Bruteforce Passwords to Microsoft Online

by John Hammond

Applied Sciences & Engineering Computing & Cybersecurity URComputer securityURHComputer fraud and hacking
🎙 John Hammond 👥 2.2M 📅 October 20, 2025 ⏱ 25 min 👁 45K 📄 tutorial 🧭 2026-08-16
Available in: English (current) Français

Keywords

credential stuffingpassword sprayingEntra IDOpenBullet2MSOLSprayEntraSprayTeamFiltrationFireproxOmniProxIPSpinnerTorFlare

Summary

In this video, John Hammond explores how hackers automate the testing of stolen credentials against Microsoft online accounts. He introduces several tools used for credential stuffing and password spraying, including OpenBullet 2, MSOLSpray, EntraSpray, and TeamFiltration. He explains the importance of IP rotation to avoid detection and rate limiting, and discusses the recent AWS policy changes that have impacted tools like Fireprox. He demonstrates the use of OmniProx and IP Spinner as alternatives, and shows a practical example of using EntraSpray with Tor to test a leaked password. The video also highlights Flare’s identity exposure management integration with Entra ID, which automatically detects and remediates compromised credentials. The content is a mix of educational demonstration and sponsor promotion, providing a realistic view of the cat-and-mouse game between attackers and defenders.

130 words

Critical Evaluation

Value of the Information & Strength of the Argument

The video provides valuable insights into the practical aspects of credential testing and the tools used by attackers. The demonstrations are clear and well-explained, showing real-world usage of the tools. The argumentation is solid, as it connects the tools to real-world attack campaigns and explains the technical details of IP rotation and proxy usage. The sponsor segment is integrated smoothly and does not detract from the educational value.

Scientific Rigor, Source Quality, Title Accuracy

The video references multiple open-source tools and recent news articles about password spraying attacks, providing a solid foundation for the information presented. The title accurately describes the content. The sources are credible and directly relevant to the topic. The video also includes a note about the legal and ethical considerations of using these tools, which adds to its rigor.

142 words

Title / Content Match

The title accurately reflects the content, which focuses on how hackers test stolen passwords against Microsoft online accounts.

Quality & Reliability

8/10

The video provides a practical demonstration of credential stuffing and password spraying tools, with references to real-world attacks and open-source tools. The information is accurate and well-presented, though it includes promotional content for a sponsor.

Key Moments

Markers derived by PSI from the transcript: the creator did not define chapters.

Cited Sources

  • OpenBullet2 — Tool for credential stuffing and automation.
  • MSOLSpray — Password spraying tool for Microsoft online accounts.
  • EntraSpray — Python rewrite of MSOLSpray.
  • TeamFiltration — Framework for enumerating, spraying, exfiltrating, and backdooring Office 365/Azure AD/Entra ID accounts.
  • Fireprox — AWS API gateway management tool for IP rotation.
  • OmniProx — Multi-cloud proxy manager for IP rotation.
  • IPSpinner — Alternative tool for IP rotation.
  • Tor Project — Anonymous network used for IP rotation.
  • Forbes Article — News article about Microsoft password spraying attack.
  • BleepingComputer Article — News article about password spraying attacks on Entra ID.
  • The Hacker News Article — News article about 80,000 Entra ID accounts targeted.
  • SC World Article — Article about TeamFiltration used in attacks.
  • OmniProx Blog Post — Blog post discussing OmniProx and IP rotation.

Concurring Sources

  • Forbes Article — Confirms the prevalence of password spraying attacks.
  • BleepingComputer Article — Reports on the scale of attacks against Entra ID.
  • The Hacker News Article — Additional coverage of the same attack campaign.

External References

Contribution & Novelties

The video provides a comprehensive overview of credential testing tools and techniques, with a focus on Microsoft online accounts. It highlights recent changes in the cybersecurity landscape, such as AWS policy updates, and demonstrates practical alternatives. The inclusion of a sponsor segment showcasing Flare’s identity exposure management adds a unique perspective on automated remediation.

Pour aller plus loin :

86 words

Radar Profile

The radar profile shows high scores in information quantity, quality, and reliability, with a slightly lower technical level. This indicates a well-balanced video that is both informative and accessible, with a strong foundation in real-world tools and events.

Reliability 8/10

💬 Sur les 0 commentaires analysés, aucune tendance n'a pu être dégagée.