dafthack / MFASweep

A tool for checking if MFA is enabled on multiple Microsoft Services
MIT License
1.38k stars 188 forks source link

MFA detection is not working adequately. #16

Open Nexact opened 2 months ago

Nexact commented 2 months ago

Hello,

It seems that when MFA is configured for a specific account, Microsoft is returning the following content. I believe it could be fixed by detecting device.login.microsoftonline.com string.

<html><head><title>Working...</title></head><body><form method="POST" name="hiddenform" action="https://device.login.microsoftonline.com:443/"><input type="hidden" name="request" value="xxxx" /><input type="hidden" name="flowToken" value="xxxx" /><input type="hidden" name="canary" value="xxxxxx" /><noscript><p>Script is disabled. Click Submit to continue.</p><input type="submit" value="Submit" /></noscript></form><script language="javascript">document.forms[0].submit();</script></body></html>