Spraykatz – A Tool Able To Retrieve Credentials On Windows Machines And Large Active Directory Environments

Spraykatz is a tool without any pretention able to retrieve credentials on Windows machines and large Active Directoryenvironments.
It simply tries to procdump machines and parse dumps remotely in order to avoid detections by antivirus softwares as much as possible.

Installation
This tool is written for python>=3. Do not use this on production environments!

Ubuntu
On a fresh updated Ubuntu.

apt update
apt install -y python3.6 python3-pip git nmap
git clone --recurse-submodules https://github.com/aas-n/spraykatz.git
cd spraykatz
pip3 install -r requirements.txt

Using Spraykatz
A quick start could be:

./spraykatz.py -u H4x0r -p L0c4L4dm1n -t 192.168.1.0/24

Mandatory arguments

SwitchesDescription
-u, –usernameUser to spray with. He must have admin rights on targeted systems in order to gain remote code execution.
-p, –passwordUser’s password or NTLM hash in the LM:NT format.
-t, –targetsIP addresses and/or IP address ranges. You can submit them via a file of targets (one target per line), or inline (separated by commas).

Optional arguments

SwitchesDescription
-d, –domainUser’s domain. If he is not member of a domain, simply use -d . instead.
-v, –verbosityVerbosity mode {warning, info, debug}. Default == info.

Acknowlegments
Spraykatz uses slighlty modified parts of the following projects:

Download Spraykatz

+————————————————-

This is only an educational purposes only I am not responsible for further activities

Join my forum and learn more ethical hacking and penetration testing

https://t.me/whiteHatHacks

Get me at

alex14324.blogspot.com

https://t.me/alex14324

https://github.com/alex14324

https://www.instagram.com/alex_14324

https://discord.gg/6NPtGxZ

——————————————————-+

Leave a Reply

Your email address will not be published. Required fields are marked *