Spray – Password Spraying for Active Directory Credentials

Spray is a tool that you can use to run a bruteforce attack against active directory credentials and services. the password list support several languages including Arabic, Chinese, French, German, Hindi, Japanese, Portuguese, Russian , Spanish and English.

This script will password spray a target over a period of time It requires password policy as input so accounts are not locked out. password list include the complexity requirement and cover the most common used in each language.

Spray – Password Spraying tool for Active Directory Credentials

You can run the attack against the following resources:

  • SMB Portal
  • OWA portal
  • lync service
  • CISCO Web VPN service

There is also an option to generate username or password list by combining several lists.

You can read more and download this tool over here: https://github.com/SpiderLabs/

Notify of
Inline Feedbacks
View all comments