Greenwolf / Spray

A Password Spraying tool for Active Directory Credentials by Jacob Wilkin(Greenwolf)
GNU General Public License v3.0
713 stars 136 forks source link

Script does not work with usernames containing whitespace #13

Open daniel-cues opened 2 years ago

daniel-cues commented 2 years ago

The script uses

for u in $(cat $userslist); do 
    (echo -n "[*] user $u%$password " && rpcclient -U "$domain/$u%$password" -c "getusername;quit" $target) >> logs/spray-logs.txt
done

Without modifying IFS as so (this might be an improper fix though, as far as I'm concerned, the actual way to read lines in bash is with read, as in the password reading part of the script):

IFS=$'\n'
...
unset IFS

This translates into usernames with whitespace in them not being supported. the logs also use "cut -d ' ' ", that would also break with whitespace in the username