AzurePasswordSprayer

使用Rust编写的工具，用于针对Azure/Office 365账户执行密码喷射攻击。

它是多线程的，并且不进行任何连接尝试。

它允许对单个电子邮件地址或文件中多个地址执行密码喷射攻击，并可以选择将有效结果保存到输出文件。

用法

Performs password spraying attacks against Azure/Office 365 accounts using one or multiple email addresses.

Usage: azure_password_sprayer [OPTIONS]

Options:
  -e, --email <EMAIL>        Email address to check
  -p, --password <PASSWORD>  Password for authentication
  -U, --userlist <USERLIST>  Path to a file containing a list of emails to check
  -o, --outfile <OUTFILE>    Output file to write the results. Defaults to "output.txt"
  -h, --help                 Print help
  -V, --version              Print version

Examples:
  ./azure_password_sprayer -e 'emailalone@mail.com' -p 'Password123'
  ./azure_password_sprayer -U mails.txt -p 'Password123' -o validaccounts.txt

先决条件

• Rust

安装

cargo install azure_password_sprayer

编译

Linux

cargo build --release

Windows

sudo apt update && sudo apt install mingw-w64
rustup target add x86_64-pc-windows-gnu
rustup toolchain install stable-x86_64-pc-windows-gnu

cargo build --release --target x86_64-pc-windows-gnu

致谢

• 该技术最初由Secureworks Counter Threat Unit发现，并在以下博客中描述
• SSOh-No，这是一个激励此Rust改进的Go工具