Everything and anything related to password spraying
☆153May 20, 2024Updated 2 years ago
Alternatives and similar repositories for awesome-password-spraying
Users that are interested in awesome-password-spraying are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A collection of tools using OCR to extract potential usernames from RDP screenshots.☆30Apr 15, 2024Updated 2 years ago
- .NET Assembly that creates network shares,sets ACE entries for directories, sets share perms, and deletes shares. Learning project for C#☆10Oct 14, 2024Updated last year
- A Python POC for CRED1 over SOCKS5☆172Oct 5, 2024Updated last year
- TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts☆1,393Mar 9, 2026Updated 4 months ago
- DFSCoerce exe revisited version with custom authentication☆43Jan 13, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Small utility script to notify via Slack about Hashcat's progress during a password cracking session☆10Mar 10, 2019Updated 7 years ago
- ☆43Oct 8, 2024Updated last year
- ☆16Dec 7, 2025Updated 7 months ago
- top usernames from azure survey 2025☆17Apr 25, 2025Updated last year
- PoC for using MS Windows printers for persistence / command and control via Internet Printing☆154May 3, 2024Updated 2 years ago
- COFF file (BOF) for managing Kerberos tickets.☆328Jul 2, 2023Updated 3 years ago
- ☆138Dec 4, 2023Updated 2 years ago
- SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Dire…☆886Feb 3, 2024Updated 2 years ago
- Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling☆1,281Mar 19, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Microsoft Graph API post-exploitation toolkit☆95Jul 13, 2024Updated last year
- BypassIT is a framework for covert malware delivery and post-exploitation using AutoIT for red / blue team self assessment.☆42Jul 6, 2025Updated last year
- Okta Verify and Okta FastPass Abuse Tool☆343Sep 4, 2024Updated last year
- ☆97Apr 27, 2026Updated 2 months ago
- Azure DevOps Services Attack Toolkit☆317Mar 15, 2025Updated last year
- ☆146Mar 10, 2026Updated 3 months ago
- A tool leveraging Kerberos tickets to get Microsoft 365 access tokens using Seamless SSO☆247Aug 25, 2024Updated last year
- A PowerShell script to perform PKINIT authentication with the Windows API from a non domain-joined machine.☆178May 13, 2024Updated 2 years ago
- Impacket is a collection of Python classes for working with network protocols.☆304Jun 23, 2026Updated 2 weeks ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Exploit Proof-of-Concept code for XAMPP v3.3.0 — '.ini' Buffer Overflow (Unicode + SEH)☆13Nov 1, 2023Updated 2 years ago
- Active Directory Auditing and Enumeration☆535Jun 12, 2026Updated 3 weeks ago
- Generate password spraying lists based on the pwdLastSet-attribute of users.☆55Dec 6, 2023Updated 2 years ago
- Scripts I use to deploy Havoc on Linode and setup categorization and SSL☆42May 31, 2024Updated 2 years ago
- Research into Undocumented Behavior of Azure AD Refresh Tokens☆364Feb 23, 2024Updated 2 years ago
- Abusing mhyprotect to kill AVs / EDRs / XDRs / Protected Processes.☆410Mar 16, 2026Updated 3 months ago
- Initial Access and Post-Exploitation Tool for Entra ID and M365 with a browser-based GUI☆1,333Jun 9, 2026Updated last month
- ☆207Feb 5, 2025Updated last year
- Finding all things on-prem Microsoft for password spraying and enumeration.☆258May 17, 2022Updated 4 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Use ESC1 to perform a makeshift DCSync and dump hashes☆211Nov 2, 2023Updated 2 years ago
- Ask a TGS on behalf of another user without password☆481Mar 30, 2025Updated last year
- Ansible Role for Ludus to provision or remove a device to/from a Tailnet.☆13May 7, 2026Updated 2 months ago
- Slides and Codes used for the workshop Red Team Infrastructure Automation☆193Apr 14, 2024Updated 2 years ago
- Decrypt Veeam database passwords☆225Dec 8, 2025Updated 7 months ago
- CaptainCredz is a modular and discreet password-spraying tool.☆138Jun 24, 2026Updated 2 weeks ago
- Low and slow password spraying tool, designed to spray on an interval over a long period of time☆222Jan 30, 2026Updated 5 months ago