password-spray

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

Username enumeration and password spraying tool aimed at Microsoft O365.

Python3 tool to perform password spraying using RDP

Spray365 makes spraying Microsoft accounts (Office 365 / Azure AD) easy through its customizable two-step password spraying approach. The built-in execution plan features options that attempt to bypass Azure Smart Lockout and insecure conditional access policies.

A SOCKS proxy written in Python that randomizes your source IP address. Round-robin your evil packets through SSH tunnels or give them billions of unique source addresses!

Modular Enumeration and Password Spraying Framework

PurpleSpray is an adversary simulation tool that executes password spray behavior under different scenarios and conditions with the purpose of generating attack telemetry in properly monitored Windows enterprise environments

Perform various SMB-related attacks, particularly useful for testing large Active Directory environments.

Fast multithreaded multiplatform password spraying tool designed for easy use. Supports webhooks, jitter, delay, files, rotation, backend database

Mass Social Engineering tool and Email and Account Extraction (Random Brute Force Discovery) and Password Brute Force through Tor.

A script designed to test passwords against user accounts within an Active Directory environment, offering customizable Account Lockout Threshold and a Reset Account Lockout Counter.

An extensible Rust-based exploitation framework designed to audit/attack AzureAD environments.

Multi-protocol password-spraying utility

Generate list of possible usernames for attacks such as password spraying

Multi-VPN password spray using OpenConnect.

PhantomMist is a powerful password spraying tool designed for ethical penetration testing and security assessments. It automates large-scale authentication attempts while minimizing detection, supporting multiple protocols and customizable attack configurations.