password-spraying

There are 1 repository under password-spraying topic.

• SprayingToolkit

  byt3bl33d3r / SprayingToolkit

  Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient

  python3red-teamssecurityowalyncskype-for-businesso365pentestingsecurity-toolspassword-spraying-attackspassword-spraying
  Language:Python 1463

• klezVirus / vortex

  VPN Overall Reconnaissance, Testing, Enumeration and eXploitation Toolkit

  osintosint-pythonpassword-guessingpassword-sprayinguser-enumeration
  Language:Python 425

• puzzlepeaches / msprobe

  Finding all things on-prem Microsoft for password spraying and enumeration.

  sprayingadfsexchangemicrosoftntlmpassword-sprayingrdwebskype
  Language:Python 250

• Tw1sm / spraycharles

  Low and slow password spraying tool, designed to spray on an interval over a long period of time

  password-guessingpassword-sprayingspraying
  Language:Python 190

• ricardojoserf / adfsbrute

  A script to test credentials against Active Directory Federation Services (ADFS), allowing password spraying or bruteforce attacks.

  adfsactive-directoryred-teampassword-sprayingbruteforcebruteforce-attacks
  Language:Python 168

• nyxgeek / AzureAD_Autologon_Brute

  Brute force attack tool for Azure AD Autologon/Seamless SSO - Source: https://arstechnica.com/information-technology/2021/09/new-azure-active-directory-password-brute-forcing-flaw-has-no-fix/

  azureazureadbruteforceenumerationpasswordpassword-sprayingpentestuser-enumeration
  Language:Python 98

• edermi / skweez

  Fast website scraper and wordlist generator

  pentestwordlist-generatorcrawlerpassword-spraying
  Language:Go 73

• CausticKirbyZ / SprayCannon

  Fast multithreaded multiplatform password spraying tool designed for easy use. Supports webhooks, jitter, delay, files, rotation, backend database

  password-sprayingpassword-spraying-attackspassword-spraycrystal-langadfso365owapentestingpentesting-toolspentest-toolred-teamsecurity-toolspasswordspraypasswordsprayingo365spray
  Language:Crystal 37

• nyxgeek / autodiscover_enum

  time-based user enum via Basic Auth in Azure against Autodiscover

  autodiscoverazurepasswordpassword-sprayingpentestingspraying
  Language:Python 30

• coj337 / TheSprayer

  TheSprayer is a cross-platform tool designed to help penetration testers spray passwords against an Active Directory domain without locking out accounts.

  adpasswordsprayingpassword-sprayingactive-directoryactivedirectoryactive-directory-exploitationpentestingpenetration-testingpentestpentest-tool
  Language:C# 29

• 0xZDH / burp-password-spray

  This extension allows a user to specify a lockout policy in order to automate a password spray attack via Intruder.

  intruderpassword-sprayingpentesting-toolspython3securitysecurity-tools
  Language:Python 24

• quantumcore / iris

  Mass Social Engineering tool and Email and Account Extraction (Random Brute Force Discovery) and Password Brute Force through Tor.

  brute-forcebrute-force-attacksbrute-forcing-accountsdiscoverinstagrampassword-spraypassword-sprayingsocial-engineeringtor
  Language:Python 21

• GabrielDuschl / Automated-CME-Password-Spraying

  A script designed to test passwords against user accounts within an Active Directory environment, offering customizable Account Lockout Threshold and a Reset Account Lockout Counter.

  activedirectorycrackmapexeccybersecurityit-securitypasswordpassword-securitypassword-spraypassword-sprayingpasswordsprayingpenetration-testpenetration-testingpenetration-testing-toolspentestingpython3red-teamred-teaming
  Language:Python 14

• MrTuxx / aad-sso-enum-brute-spray

  Proof of Concept in Go from Secureworks' research on Azure Active Directory Brute-Force Attacks. Inspired by @treebuilder's POC on PowerShell.

  user-enumerationazureadsingle-sign-onpassword-spraying
  Language:Go 13

• tmenochet / PowerSpray

  Offensive tool for guessing Active Directory credentials via Kerberos

  asrep-roastingkerberoastingpassword-sprayinguser-enumerationpass-the-key
  Language:PowerShell 9

• y0k4i-1337 / gsprayer

  A DOM-based G-Suite Password Sprayer

  gsuitehackingpassword-sprayingpentest
  Language:Python 7

• usethisname1419 / HTTPFTPSSH_Killer

  Advanced FTP/SSH/HTTP Bruteforce tool.

  brute-forcebrute-force-attacksbruteforceformsftpftp-brftp-bruteforcehackinghacking-toolshttphttp-post-formhydrakali-linuxpassword-sprayingpenetration-testingsprayingsshssh-brssh-bruteforce
  Language:Python 6

• y0k4i-1337 / imapsprayer

  A simple IMAP password sprayer

  hackingimappassword-sprayingpasswordspraypentest
  Language:Python 6

• ishan-saha / CredSpray

  A powershell based tool for credential spraying in any AD env.

  ad-hackingpassword-sprayingpassword-spraying-attackspowershell-toolsredteamredteam-toolsethical-hacking-tool
  Language:PowerShell 2

• sator-sdk / HashSpray-DomainController

  A script that perform a Pre-Auth with a Domain Controller with a given username and a list of hashes

  active-directorydomain-controllerkerberos-authenticationpassword-sprayingpython
  Language:Python 2

• dadevel / krb-spray

  Password Spraying and Brute Forcing over Kerberos

  brute-forcekerberospassword-spraying
  Language:Python 1

• ricardojoserf / textpattern-bruteforce

  Script to bruteforce websites using TextPattern CMS.

  textpatternbruteforcepassword-sprayingtextpattern-bruteforce
  Language:Python 1

• y0k4i-1337 / domsprayer

  A generic DOM-based password sprayer

  automationhackingpasswordpassword-sprayingpuppeteer
  Language:JavaScript 1

• 0xliu / RapidIdentitySpray

  Python3 tool to perform password spraying on RapidIdentity Portal

  password-sprayingpasswordspraying
  Language:Python 0

• rafaelbaldasso / db-spray

  Database brute force/password spraying tool

  brute-forcemssqlmysqlpassword-sprayingpostgresqlshell
  Language:Shell 0

• whatsyourask / divine-dragon

  A tool written in Go to perform a few penetration testing techniques in the environment with Active Directory.

  active-directoryasreproastingcommand-and-controldcsyncenumeration-toolkerberoastingmimikatzpass-the-hashpass-the-ticketpassword-sprayingpenetration-testing-toolspowerviewgolang
  Language:PowerShell 0

• dadevel / http-spray

  Password Spraying and Brute Forcing over HTTP(S)

  password-sprayingbrute-forcehttp
  Language:Python