Password Spraying | Password Psychology, Kerbrute & More

💬 Join the Community   / discord   💥 Red Cell Operator I https://hackerforce.io/courses/red-ce... 🖥️ Presentation https://tinyurl.com/password-spraying 📌 About Reckon we could guess how your password starts. Uppercase character, all lowercase after, a number, and a special character to finish? Go on, admit it. Most people still do, and that's exactly what makes password spraying so devastatingly effective. In HackerForce's latest video, sunflower delves deep into: The anatomy of password spraying and why it's so effective Password psychology, and how human behaviour can be leveraged to increase success rates Enumerating and gathering users for password spraying Using Kerbrute to spray passwords, along with some OPSEC tips Red teamer or not, there's plenty to take away here, and maybe just enough to knock you out of the habit of using the same tired password methodology as everyone else. 📚 Resources Kerbrute: https://github.com/ropnop/kerbrute PowerView: https://powersploit.readthedocs.io/en... sharpsh: https://github.com/thelikes/sharpsh Common password topologies: https://github.com/JohannesBuchner/Pa... 🔔 Stay Connected X/Twitter: https://x.com/hackerforcex ⏱️ Timestamps 00:00 Introduction 01:24 Password spraying anatomy 03:58 Enumerating a domain's password policy (e.g. PasswordComplexity, etc.) 06:59 Maximising success through password psychology 08:17 Commonly used password topologies 09:33 Kerbrute and its internals 10:50 Compiling Kerbrute 11:44 Gathering a list of targets 14:00 Executing a password spraying attack 15:30 Improving OPSEC through spray delays 16:57 Upcoming 🔗 Tags #sliver #c2 #redteam #blueteam #hacker #hack #penetrationtesters #pentesting #mimikatz #metasploit #kerbrute #passwordspraying #kerberos #activedirectory