Technique
technique:password_spraying
Also: password-spraying, targeted spray
Testing a small number of obtained credentials across multiple workstations or systems.
Testing a small number of obtained credentials across multiple workstations or systems.
“I do a very targeted spray with their username and their password against all of it.”
Authentication attack technique using a list of usernames and common passwords against a domain controller.
“start password-spraying against that domain controller”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | USES | Tinker Secor | Explicit | 36 |
| incoming | USES | Joe Sarkisian | Explicit | 149 |
Tinker Secor USES password spraying
Tinker performed a targeted password spray against workstations using recovered usernames and passwords.
Explicit Confidence 99% · Tinker Secor EP 36 Details
“I do a very targeted spray with their username and their password against all of it.”
Joe Sarkisian USES password spraying
Joe describes password-spraying a domain controller using a discovered list of users and common passwords.
Explicit Confidence 99% · Joe Sarkisian EP 149 Details
“start password-spraying against that domain controller”