password-spraying topic

Finding all things on-prem Microsoft for password spraying and enumeration.

puzzlepeaches

VPN Overall Reconnaissance, Testing, Enumeration and eXploitation Toolkit

klezVirus

A script to test credentials against Active Directory Federation Services (ADFS), allowing password spraying or bruteforce attacks.

ricardojoserf

Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient

byt3bl33d3r

Brute force attack tool for Azure AD Autologon/Seamless SSO - Source: https://arstechnica.com/information-technology/2021/09/new-azure-active-directory-password-brute-forcing-flaw-has-no-fix/

nyxgeek

Low and slow password spraying tool, designed to spray on an interval over a long period of time

Tw1sm

Fast website scraper and wordlist generator

edermi

This extension allows a user to specify a lockout policy in order to automate a password spray attack via Intruder.

0xZDH

TheSprayer is a cross-platform tool designed to help penetration testers spray passwords against an Active Directory domain without locking out accounts.

coj337

Fast multithreaded multiplatform password spraying tool designed for easy use. Supports webhooks, jitter, delay, files, rotation, backend database

CausticKirbyZ