Skip to content

Latest commit

 

History

History
20 lines (13 loc) · 834 Bytes

password-spraying.md

File metadata and controls

20 lines (13 loc) · 834 Bytes

Password Spraying

Introduction

Password spraying is an attack involving an attempt to log into an exposed service using one common password and a longer list of usernames or email addresses

Attack Scenario

  1. Kerbrute for Userenum and Password Spraying
  2. statistically-likely-usernames (jsmith.txt)
  3. Use a common password such as Welcome1 or the season followed by the current year (i.e. Summer2022)
  4. Password Spray w/ Kerbrute

{% embed url="https://github.com/insidetrust/statistically-likely-usernames" %} GitHub Repository {% endembed %}

Visualization