top of page

o365 Business Premium account MFA bypass

  • Writer: Chris Coulombe
    Chris Coulombe
  • Nov 3, 2022
  • 1 min read

I setup a Debian 10 server on Linode to host Evilginx where I was able to successfully initiate a man-in-the-middle attack to steal the username, password and session cookie information which was used to bypass 2-factor authentication.



I will also be adding my own step by step guide on how to set-up this infrastructure using Linode and explaining how I worked through some missing steps not shown in the previous guide.

Comments


Inquisitive Cybersecurity

  • alt.text.label.LinkedIn

©2024 by Inquisitive Cybersecurity. 

bottom of page