spray

Spray is a password spraying tool designed for Active Directory credentials. It targets services like SMB, OWA, Lync, and Cisco Web VPN by attempting passwords over a controlled period, requiring password policy details such as attempts per lockout period and lockout duration in minutes to prevent account lockouts.

The tool includes hand-crafted password files for multiple languages, derived from common Active Directory passwords that meet complexity requirements (1 upper, 1 lower, 1 digit). These files support spraying against various authentication portals and services.

Additional features allow updating password lists to the current year and generating username lists from common first and last names using customizable formats.

Spray operates by distributing password attempts across a lockout period based on provided policy inputs (attempts per lockout, lockout minutes). For SMB, it uses smbclient to authenticate against domain targets. OWA spraying requires a custom POST request file with placeholders for username and password. Lync targets autodiscover or auth header URLs with email lists. Cisco VPN sprays against portal URLs. Password updates append current year; user generation combines name lists with format strings.