Checks OneDrive access based on someone's UPN.

cookie-authenticated-onedrive-enum.py

from requests import Session, urllib3
import re
urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)

# Need data here
cookies = {
	'rtFa': '',
	'FedAuth': ''
}

upns = 'upn-input.txt'
outputfile = 'found-output.txt'
base_url = 'https://<ORGANISATION>-my.sharepoint.com/'

session = Session()
proxy = 'http://127.0.0.1:8080'
session.proxies = None
# session.proxies = {'http':proxy, 'https':proxy}
# session.verify = False
session.cookies.update(cookies) # Add the auth cookies to the session.


def upn_to_username(upn):
	return re.sub('[.@]', '_', upn)


def checkfiles(upn):
	username = upn_to_username(upn)
	url = f'{base_url.rstrip("/")}/personal/{username}/_layouts/15/onedrive.aspx?view=4'

	r = session.get(url)
	# print(r)
	if r.status_code == 200:
		formdigest = re.findall('"formDigestValue":"(.*?)"', r.content.decode())[0]
		headers = {'x-requestdigest': formdigest, 'accept':'application/json;odata=verbose'}
		url = f'{base_url.rstrip("/")}/personal/{username}/_api/me/getsharedwithpersondocs'
		r = session.post(url, headers=headers, data='')
		if r.status_code == 200:
			# print(r.json())
			if len(r.json()['d']['results']) > 0:
				print(f'{upn} - True')
				return True
		else:
			# print(r.content)
			pass

	print(f'{upn} - False')


with open(upns, 'r') as i_f:
	with open(outputfile ,'w') as o_f:
		for upn in i_f:
			upn = upn.strip()
			if checkfiles(upn):
				o_f.write(upn)
				o_f.write('\n')