mrfelpa / RDPPasswordSprayScript

This script allows you to perform password spraying attacks against Remote Desktop Protocol (RDP) servers. It automates the process of trying a single password across multiple usernames to find valid login credentials.

Prerequisites

• Python 3.x

• click library (can be installed via pip: pip install click)

  Usage

Clone the repository or download the rdp_password_spray.py script to your local machine.

Open a terminal and navigate to the directory where the script is located.

Run the script using the following command:

python rdp_password_spray.py

Follow the instructions to provide the required information:

• RDP Server IP or Hostname: Enter the IP address or hostname of the destination RDP server.

• Path to username file: Provide the path to a file containing a list of usernames to try.

• Password to spray: Enter the password to spray usernames.

The script will start the password distribution process and display the progress and results in the CLI.

Important notes

• Use with proper authorization: Make sure you have proper authorization from the target system before carrying out any password spraying activities. Unauthorized access to systems is illegal and unethical.

• Legal and Controlled Environments: This script should only be used in legal and controlled environments, such as authorized penetration testing, where you have obtained the appropriate permission to perform password spraying on RDP servers.

• Disclaimer: The author of this script are not responsible for any misuse, damage, or illegal activities caused by the use of this script. Use it at your own risk.

• Happy Testing and be responsible!

  Contributing

• Contributions to this script are welcome! Feel free to customize and expand this documentation to meet your specific needs.