search

Greenwolf / Spray

A Password Spraying tool for Active Directory Credentials by Jacob Wilkin(Greenwolf)
GNU General Public License v3.0
721 stars 137 forks source link

Results not detecting valid login and reporting it as logon failure #17

Open hackerlawyer opened 3 weeks ago

hackerlawyer commented 3 weeks ago

SMB spraying performed with valid usernames and known valid password returned logon failure despite being accurate and reconfirmed with crackmapexec as valid login. Trying to work this tool into my pen test arsenal to automate password spraying but looking like manually spraying with cme is best as this tool is returning false negatives. Please advise as to potential problems/solutions and whether you have seen this behavior before. Thank you. Maybe it only returns as logon successful if ADMIN$ share is accessible? Its honestly a real bummer as this tool gave me hope for not having to password spray manually anymore. Could have been a great improvement in testing quality for my clients as well.

hackerlawyer commented 3 weeks ago

Found the solution to my problem - insert a whitespace after each username in your lists!