password-spraying

There are 1 repository under password-spraying topic.

• SprayingToolkit

  byt3bl33d3r / SprayingToolkit

  Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient

  lynco365owapassword-sprayingpassword-spraying-attackspentestingpython3red-teamssecuritysecurity-toolsskype-for-business
  Language:Python 1452

• klezVirus / vortex

  VPN Overall Reconnaissance, Testing, Enumeration and eXploitation Toolkit

  osintosint-pythonpassword-guessingpassword-sprayinguser-enumeration
  Language:Python 424

• puzzlepeaches / msprobe

  Finding all things on-prem Microsoft for password spraying and enumeration.

  sprayingadfsexchangemicrosoftntlmpassword-sprayingrdwebskype
  Language:Python 249

• Tw1sm / spraycharles

  Low and slow password spraying tool, designed to spray on an interval over a long period of time

  password-guessingpassword-sprayingspraying
  Language:Python 188

• ricardojoserf / adfsbrute

  A script to test credentials against Active Directory Federation Services (ADFS), allowing password spraying or bruteforce attacks.

  adfsactive-directoryred-teampassword-sprayingbruteforcebruteforce-attacks
  Language:Python 167

• nyxgeek / AzureAD_Autologon_Brute

  Brute force attack tool for Azure AD Autologon/Seamless SSO - Source: https://arstechnica.com/information-technology/2021/09/new-azure-active-directory-password-brute-forcing-flaw-has-no-fix/

  pentestbruteforceazureadazurepasswordpassword-sprayinguser-enumerationenumeration
  Language:Python 98

• edermi / skweez

  Fast website scraper and wordlist generator

  pentestwordlist-generatorcrawlerpassword-spraying
  Language:Go 72

• CausticKirbyZ / SprayCannon

  Fast multithreaded multiplatform password spraying tool designed for easy use. Supports webhooks, jitter, delay, files, rotation, backend database

  password-sprayingpassword-spraying-attackspassword-spraycrystal-langadfso365owapentestingpentesting-toolspentest-toolred-teamsecurity-toolspasswordspraypasswordsprayingo365spray
  Language:Crystal 36

• coj337 / TheSprayer

  TheSprayer is a cross-platform tool designed to help penetration testers spray passwords against an Active Directory domain without locking out accounts.

  adpasswordsprayingpassword-sprayingactive-directoryactivedirectoryactive-directory-exploitationpentestingpenetration-testingpentestpentest-tool
  Language:C# 28

• 0xZDH / burp-password-spray

  This extension allows a user to specify a lockout policy in order to automate a password spray attack via Intruder.

  intruderpassword-sprayingsecuritypython3pentesting-toolssecurity-tools
  Language:Python 23

• quantumcore / iris

  Mass Social Engineering tool and Email and Account Extraction (Random Brute Force Discovery) and Password Brute Force through Tor.

  torbrute-force-attacksbrute-forcesocial-engineeringpassword-spraypassword-sprayinginstagramdiscoverbrute-forcing-accounts
  Language:Python 21

• GabrielDuschl / Automated-CME-Password-Spraying

  A script designed to test passwords against user accounts within an Active Directory environment, offering customizable Account Lockout Threshold and a Reset Account Lockout Counter.

  activedirectorycrackmapexeccybersecurityit-securitypasswordpassword-securitypassword-spraypassword-sprayingpasswordsprayingpenetration-testpenetration-testingpenetration-testing-toolspentestingpython3red-teamred-teaming
  Language:Python 14

• MrTuxx / aad-sso-enum-brute-spray

  Proof of Concept in Go from Secureworks' research on Azure Active Directory Brute-Force Attacks. Inspired by @treebuilder's POC on PowerShell.

  user-enumerationazureadsingle-sign-onpassword-spraying
  Language:Go 13

• tmenochet / PowerSpray

  Offensive tool for guessing Active Directory credentials via Kerberos

  asrep-roastingkerberoastingpassword-sprayinguser-enumerationpass-the-key
  Language:PowerShell 9

• usethisname1419 / HTTPFTPSSH_Killer

  Advanced FTP/SSH/HTTP Bruteforce tool.

  brute-forceftphacking-toolssprayingsshftp-brssh-brbrute-force-attacksftp-bruteforcepassword-sprayingssh-bruteforcebruteforcehackingkali-linuxpenetration-testingformshttphttp-post-formhydra
  Language:Python 7

• y0k4i-1337 / gsprayer

  A DOM-based G-Suite Password Sprayer

  gsuitehackingpassword-sprayingpentest
  Language:Python 7

• y0k4i-1337 / imapsprayer

  A simple IMAP password sprayer

  hackingimappassword-sprayingpasswordspraypentest
  Language:Python 6

• ishan-saha / CredSpray

  A powershell based tool for credential spraying in any AD env.

  ad-hackingpassword-sprayingpassword-spraying-attackspowershell-toolsredteamredteam-toolsethical-hacking-tool
  Language:PowerShell 2

• sator-sdk / HashSpray-DomainController

  A script that perform a Pre-Auth with a Domain Controller with a given username and a list of hashes

  active-directorydomain-controllerpassword-sprayingpythonkerberos-authentication
  Language:Python 2

• dadevel / krb-spray

  Password Spraying and Brute Forcing over Kerberos

  brute-forcekerberospassword-spraying
  Language:Python 1

• ricardojoserf / textpattern-bruteforce

  Script to bruteforce websites using TextPattern CMS.

  textpatternbruteforcepassword-sprayingtextpattern-bruteforce
  Language:Python 1

• whatsyourask / divine-dragon

  A tool written in Go to perform a few penetration testing techniques in the environment with Active Directory.

  active-directoryasreproastingcommand-and-controldcsyncenumeration-toolkerberoastingmimikatzpass-the-hashpass-the-ticketpassword-sprayingpenetration-testing-toolspowerviewgolang
  Language:PowerShell 1

• y0k4i-1337 / domsprayer

  A generic DOM-based password sprayer

  automationhackingpasswordpassword-sprayingpuppeteer
  Language:JavaScript 1

• 0xliu / RapidIdentitySpray

  Python3 tool to perform password spraying on RapidIdentity Portal

  password-sprayingpasswordspraying
  Language:Python 0

• rafaelbaldasso / db-spray

  Database brute force/password spraying tool

  brute-forcemssqlmysqlpassword-sprayingpostgresqlshell
  Language:Shell 0

• dadevel / http-spray

  Password Spraying and Brute Forcing over HTTP(S)

  password-sprayingbrute-forcehttp
  Language:Python