Searching for vulnerable ADFS endpoints that are exposed to the Internet
https://github.com/MicrosoftDocs/windowsserverdocs/blob/master/WindowsServerDocs/identity/ad-fs/deployment/Best-Practices-Securing-AD-FS.md
https://docs.microsoft.com/ru-ru/windows-server/identity/ad-fs/deployment/best-practices-securing-ad-fs
https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/configure-ad-fs-extranet-smart-lockout-protection
https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/configure-ad-fs-extranet-soft-lockout-protection
https://domain.com/adfs/services/trust/13/windowstransport
https://domain.com/ls/idpinitiatedsignon.aspx
PS:>Set-AdfsEndpoint -TargetAddressPath /adfs/services/trust/2005/windowstransport -Proxy $false
PS:>Set-AdfsEndpoint -TargetAddressPath /adfs/services/trust/13/windowstransport -Proxy $false
Just populate array g_originaldomains with list of domains.
g_originaldomains = ["google.com"]