rak00n/gospray

Tool to bruteforce Windows LDAP, Kerberos, RDP, SSH, FTP, HTTP basic and digest authentication

GoSpray

Simple tool to bruteforce (spray actually) different network protocols. GoSpray also supports restoration of interrupted tasks ("-restore").

GoSpray currently supports: rdp, ssh, ftp, Windows LDAP, Windows Kerberos, http basic and digest authentication

go run . -ul testUsernames.txt -pl testPasswords.txt -p ftp -tl targets.txt -w 10
---------------+
Success: 192.168.56.102:user:123
-------------------

go run . -ul testUsernames.txt -pl testPasswords.txt -p ftp -tl targets.txt -w 10
--------

CTRL+C

go run . -restore
-------+
Success: user:123
-------------------

-ul Path to file with usernames

-ul Path to file with passwords

-p Protocol to brute ( winldap, rdp, ssh, ftp, httpbasic, httpdigest )

-tl Path to file with targets (one target per line ex: "http://127.0.0.1:667/protected/folder/")

-w Number of workers (threads)

-debug Run with debug information (for now only httpbasic)

-restore use "progress.gob" to restore task

Target formats:

192.168.56.102 - for **ssh, rdp, ldap, ftp**

192.168.56.102:21 - for **ssh, rdp, ldap, ftp**

http://192.168.56.102:80/2 - for **basic** and **digest authentication**

test.local:88 - for **Windows Kerberos**

Examples:

spray.exe -ul testUsernames.txt -pl testPasswords.txt -p ssh -tl targets.txt -w 10

spray.exe -ul testUsernames.txt -pl testPasswords.txt -p httpbasic -tl targets.txt -w 10 -ru -rp

spray.exe -restore

gospray's Issues

Why is it printing + on each string?

I was testing it like that
GoSp.exe -p httpbasic -pl pass.txt -tl ip.txt -ul user.txt -rp -ru -w 10
but it's printing "+" or "++" on each string. Also i was testing it with correct username and password but the same thing.

Success: www.cmd5.org:asad23232:asdafswe2

Success: www.cmd5.org:sdgsdgfsd:asdafswe2
+
Success: www.cmd5.org:sdfsdfsdf:asdafswe2
+
Success: www.cmd5.org:asdasdasd:asdafswe2
+
Success: www.cmd5.org:asad23232:asd23dd2wdw
+
Success: www.cmd5.org:sdfsdfsdf:asd23dd2wdw
+
Success: www.cmd5.org:sdgsdgfsd:asd23dd2wdw
+
Success: www.cmd5.org:asdasdasd:asd23dd2wdw

Error while running sudo go run . -ul usernames.txt -pl /usr/share/wordlists/rockyou.txt -tl targets.txt -w 10 -p httpdigest

panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x10 pc=0x72292b]

goroutine 7 [running]:
main.digestSpray(0xc009c18340?, 0xc004c31080?, {{0xc000099fc0, 0x1, 0x1}, {{0xc0000be9f7, 0xa}, 0x50, {0xc0000be9f0, 0x4}, ...}, ...}, ...)
/home/kali/GoSpray/digestSpray.go:33 +0x46b
created by main.main
/home/kali/GoSpray/main.go:140 +0xcc5
exit status 2

Target

Hello,
is there a way to add a target host file with a list of the targets?

signal: killed

go run . -ul logins.txt -pl passwords.txt -p rdp -tl ips2.txt -w 10 -debug
signal: killed

after 10sec
big base ips

debian 12