run like simple checker

[sec13b]

if if have the credentials in this format, and want run like simple checker.

https://Contoso.com/owa/auth/logon.aspx
Contoso.com\test1:Apple@456

./ruler --domain evilcorp.ninja --insecure brute --userpass userpass.txt -v

and in userpass.txt have :
Contoso.com\test1:Apple@456
or
'Contoso.com\test1':Apple@456

some will give error : A mailbox couldn't be found for Contoso.com\test1.

[staaldraad]

Hey @sec13b

you probably just need test1 and not Contoso.com\test1 for the user. The domain component should be taken care of automatically as part of the auth.