Skip to content

Commit 9cb4307

Browse files
authored
Update README.md
1 parent b098d15 commit 9cb4307

File tree

1 file changed

+2
-3
lines changed

1 file changed

+2
-3
lines changed

README.md

+2-3
Original file line numberDiff line numberDiff line change
@@ -6,12 +6,11 @@ Currently MFASweep has the ability to login to the following services:
66
* Microsoft Graph API
77
* Azure Service Management API
88
* Microsoft 365 Exchange Web Services
9-
* Microsoft 365 Web Portal
10-
* Microsoft 365 Web Portal Using a Mobile User Agent
9+
* Microsoft 365 Web Portal w/ 6 device types (Windows, Linux, MacOS, Android Phone, iPhone, Windows Phone)
1110
* Microsoft 365 Active Sync
1211
* ADFS
1312

14-
**WARNING: This script attempts to login to the provided account SIX (6) different times (7 if you include ADFS). If you entered an incorrect password this may lock the account out.**
13+
**WARNING: This script attempts to login to the provided account TEN (10) different times (11 if you include ADFS). If you entered an incorrect password this may lock the account out.**
1514

1615
For more information check out the blog post here: [Exploiting MFA Inconsistencies on Microsoft Services](https://www.blackhillsinfosec.com/exploiting-mfa-inconsistencies-on-microsoft-services/)
1716

0 commit comments

Comments
 (0)