From f994a97e022aa18abc8766c47950a693b226845b Mon Sep 17 00:00:00 2001
From: Bu4275 <bu4275@gmail.com>
Date: Fri, 3 Jul 2020 15:46:15 +0800
Subject: [PATCH] HTMLEncoded Password in Office365 soap

---
 LyncSniper.ps1 | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/LyncSniper.ps1 b/LyncSniper.ps1
index bf225d8..df210ea 100755
--- a/LyncSniper.ps1
+++ b/LyncSniper.ps1
@@ -441,6 +441,7 @@ function Invoke-AuthenticateO365
 
   try
   {
+    $EncodedPassword = [System.Web.HttpUtility]::HtmlEncode($Password)
     $soap = @"
 <?xml version="1.0" encoding="UTF-8"?>
 <S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:wsa="http://www.w3.org/2005/08/addressing" xmlns:wst="http://schemas.xmlsoap.org/ws/2005/02/trust">
@@ -454,7 +455,7 @@ function Invoke-AuthenticateO365
     <wsse:Security>
     <wsse:UsernameToken wsu:Id="user">
         <wsse:Username>$($Username)</wsse:Username>
-        <wsse:Password>$($Password)</wsse:Password>
+        <wsse:Password>$($EncodedPassword)</wsse:Password>
     </wsse:UsernameToken>
     <wsu:Timestamp Id="Timestamp">
         <wsu:Created>$(([DateTime]::UtcNow.ToString("o")))</wsu:Created>