PassSpray

Domain Password Spray | https://github.com/Leo4j/PassSpray

The PassSpray module is designed for performing Domain Password Spraying attacks.

To load this module, simply type PassSpray. This will also display the available usage options.

Users are expected to provide the password to be sprayed across the domain. If a password is not provided, Amnesiac will attempt to authenticate against user accounts using an empty password.

Important Note:

It is crucial to exercise caution when using the PassSpray module, as each incorrect authentication attempt (sprayed password) increases the "Bad Pwd Count" for the user accounts you are trying to validate credentials for. Repeated failed attempts can potentially lead to user account lockouts.

Last updated