password-spraying-attacks

Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient

Fast multithreaded multiplatform password spraying tool designed for easy use. Supports webhooks, jitter, delay, files, rotation, backend database

Multi-protocol credential validation tool with spray and no-spray modes for penetration testing.

LogAnalysisTool: provide a new approach for pattern attack search and for calculation of severity of logins in Linux's Wtmp, Btmp and Secure log. Searched patterns: Brute Force, Password Spraying. Also check of IPWhois and Reputation. Plus utility functions.

A powershell based tool for credential spraying in any AD env.

Username enumeration and username generation tool for penetration testing, OSINT, Active Directory, and red team engagements. Generates username wordlists from real names and common naming conventions.

Educational writeup on credential stuffing & password spraying attacks — concepts, MITRE ATT&CK mapping, detection strategies, and a defensive log-anomaly detection script.

IronGate is a secure password-based authentication system that provides user registration, login, password change, and password reset with robust hashing, lockout policies, and audit logging. It’s designed as a teaching/demo project to showcase best practices in modern authentication and basic application security.

Laboratório prático realizado em ambiente controlado de segurança ofensiva utilizando Kali Linux, Medusa, DVWA e Metasploitable 2 para simulação de ataques de brute force e password spraying.

Transform images into realistic spray paint effects using Python and JavaScript without requiring Photoshop or complex tools.