coj337/TheSprayer

  # TheSprayer TheSprayer 是一款跨平台工具，旨在帮助渗透测试人员针对 Active Directory 域进行密码喷洒，且_不会_锁定账户。 默认情况下，该工具启用了多项实用功能，例如用户自动发现、当前用户发现，以及使用本地 sqlite 数据库来跟踪已喷洒的密码。 ## 快速开始 要运行它，您需要更新相关参数。 我在下面列举了一系列常见的用例，您也可以自由组合使用！🔥 ##### 使用密码列表对所有用户进行喷洒： ``` TheSprayer.exe -p Passwords.txt ``` ##### 针对特定用户列表进行喷洒： ``` TheSprayer.exe -u Users.txt ``` ##### 对单个用户和密码进行喷洒： ``` TheSprayer.exe -u DomainAdmin -p DefinitelyValidPassword ``` ##### 对带有空密码的单个用户进行喷洒： ``` TheSprayer.exe -u DomainAdmin --empty-password ``` ##### 以其他用户身份进行喷洒 ``` TheSprayer.exe -U Administrator -P Password1 -p Passwords.txt ``` ##### 从非域机器（例如使用 runas /netonly）进行喷洒 ``` TheSprayer.exe -d windomain.local -s 192.168.38.102 -p Passwords.txt ``` ##### 从非域机器上以其他用户身份进行喷洒 ``` TheSprayer.exe -d windomain.local -s 192.168.38.102 -U Administrator -P Password1 -p Passwords.txt ``` ##### 强制对所有用户使用密码列表进行喷洒 ``` TheSprayer.exe -p Passwords.txt -f ``` *注意：即使检测到不安全也会强制喷洒，使用风险自负！* ##### 将所有密码策略打印到终端 ``` TheSprayer.exe --Policy ``` ##### 将用户列表输出到 AdUserList.txt ``` TheSprayer.exe --Users ``` ##### 将 AD 中的用户列表及其所有详细信息写入 AdUserDetails.csv ``` TheSprayer.exe --UsersCsv ``` ## 选项 ``` -d, --Domain Required. The Active Directory domain (e.g. windomain.local) -s, --Server Required. The IP or hostname of a domain controller -U, --Username Required. Username for domain user to enumerate policies -P, --Password Required. Password for domain user to enumerate policies -u, --UserList A file containing a line delimited list of usernames or a single user to try -p, --PasswordList Required. A file containing a line delimited list of passwords or a single password to try --empty-password Try an empty password (cannot be combined with -p) -o, --OutFile File to output found credentials -a, --AttemptsRemaining Amount of attempts to leave per-account before lockout (Default: 2) -c, --Continuous Continuously spray credentials, waiting between attempts to prevent lockout. -n, --NoDb Disable using a DB to store previously sprayed creds. --Users Outputs a list of all users to the specified file --UsersCsv Outputs a list of all users along with their domain info to the specified CSV file --Policy Outputs the password policy(ies) to the terminal --retryonsuccess Spray accounts which have previously recorded valid passwords -f, --Force Force authentication attempts, even users close to lockout --help Display this help screen. ``` ## 发布版本 | [Windows](https://github.com/coj337/TheSprayer/releases/latest/download/TheSprayer.exe) | [Linux](https://github.com/coj337/TheSprayer/releases/latest/download/TheSprayer) |

标签：Terraform 安全, 多人体追踪, 密码喷射, 活动目录