{"repo":"blacklanternsecurity/TREVORspray","free":true,"listed":false,"github":"https://github.com/blacklanternsecurity/TREVORspray","clone":"git clone https://github.com/blacklanternsecurity/TREVORspray.git","description":"TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!","language":"Python","stars":1375,"topics":["password","spraying","security","hacking","microsoft","passwords","office","365","exchange","oauth"],"license":"GPL-3.0","category":"security-tools","readme_excerpt":"TREVORspray 2.0 TREVORspray is a modular password sprayer with threading, SSH proxying, loot modules, and more! By @thetechr0mancer Installation: bash pip install git+https://github.com/blacklanternsecurity/trevorproxy pip install git+https://github.com/blacklanternsecurity/trevorspray See the accompanying Blog Post for a fun rant and some cool demos! Features - Threads, lots of threads - Multiple modules - msol (Office 365) - adfs (Active Directory Federation Services) - owa (Outlook Web App) - okta (Okta SSO) - anyconnect (Cisco VPN) - custom modules (easy to make!) - Tells you the status of each account: if it exists, is locked, has MFA enabled, etc. - Automatic cancel/resume (remembers already-tried user/pass combos in /.trevorspray/tried logins.txt ) - Round-robin proxy through multiple IPs with --ssh or --subnet - Automatic infinite reconnect/retry if a proxy goes down (or if you lose internet) - Spoofs User-Agent and other signatures to look like legitimate auth traffic - Comprehensive logging - Optional --delay , --jitter , and --lockout-delay between requests to bypass lockout countermeasures - IPv6 support - O365 MFA bypass support (disable with --no-loot ) - IMAP - SMTP - POP - EWS (Exchange Web Services) - Automatically retrieves GAL (Global Address Book) - EAS (Exchange ActiveSync) - Recommended bypass: BlueMail Android app - EXO (Exchange Online PowerShell) - UM (Exchange Unified Messaging) - AutoDiscover - Automatically retrieves OAB (Offline Address Book) - Az","default_branch":null,"files":null,"tree":[],"storefront":"/r/blacklanternsecurity","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/blacklanternsecurity/TREVORspray/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}