CTT Report Hub: “#technique ResetSpy Probe Microsoft's Self-Service Password Reset (SSP…”

CTT Report Hub @aptreports · 3.5K subscribers

Post #32583 107 Sep 21, 2026, 16:11 UTC

#technique

ResetSpy
Probe Microsoft's Self-Service Password Reset (SSPR) endpoint to enumerate registeted verification methods and flag any that lack a strong second factor. Provides user enumeration and an approximation of MFA posture across Entra accounts.

https://github.com/mlcsec/ResetSpy

GitHub GitHub - mlcsec/ResetSpy: Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password… Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal - mlcsec/ResetSpy

Open in Telegram All posts from @aptreports