REDMED-X 50a882c270 Update README.md		1 年之前
..
README.md	50a882c270 Update README.md	1 年之前
beacon.h	179fe0919d new tool update	1 年之前
bofcompile.bat	179fe0919d new tool update	1 年之前
passwordspray.c	179fe0919d new tool update	1 年之前
passwordspray.cna	179fe0919d new tool update	1 年之前
passwordspray.h	179fe0919d new tool update	1 年之前
passwordspray.o	179fe0919d new tool update	1 年之前

PasswordSpray

Validate a single password against multiple accounts using kerberos authentication and a list with predefined usernames. The list can be loaded from your own attacker system.

A valid list with usernames is considered newline separated.

Arguments

<path to username file>: the path on your own attacker system to a file containing the list with usernames. Each username must be newline separated.
<password>: the password to validate against the usernames.
<domain>: FQDN of the domain.
<sleeptimer>: (optional) sleep timer in seconds to wait between each authentication attempt (default is 0).
<jitter>: (optional) jitter in percentage (default 0).

Usage

passwordspray <path to username file> <password> <domain> [opt <sleeptimer>] [opt <jitter>]

Examples

passwordspray C:\Users\redmed\Documents\usernames.txt Welcome01 example.local 10 40
passwordspray C:\Users\redmed\Documents\usernames.txt Welcome01 example.local

Compile

1. Make sure Visual Studio is installed and supports C/C++.
2. Open the x64 Native Tools Command Prompt for VS <2019/2022> terminal.
3. Run the bofcompile.bat script to compile the object file.
4. In Cobalt strike, use the script manager to load the .cna script to import the tool.