Black & White Path

Jul 2, 2026 · Information Security

Unauthenticated Enumeration of All Microsoft Account Authentication Methods with CredSpy

CredSpy, an open‑source tool released by security researcher RedByte1337, leverages Microsoft’s public GetCredentialType API to enumerate, without any authentication, the full set of supported authentication methods for a given Microsoft 365 (Entra ID) account, aiding red‑team reconnaissance and defensive assessments.