Skip to content

A threat actor may guess the target credentials using a single password with a large set of usernames against the target

License

Notifications You must be signed in to change notification settings

qeeqbox/password-spraying

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

8 Commits
 
 
 
 
 
 
 
 

Repository files navigation

A threat actor may guess the target credentials using a single password with a large set of usernames against the target

Example #1

  1. Threat actor finds a commonly used passwords
  2. Threat actor utilizes the passwords with a list of usernames

Impact

Vary

Risk

  • Gain unauthorized access

Redemption

  • Increase the password length
  • Increase password complexity
  • Limit login attempts
  • Implement captcha
  • Multi-factor authentication

ID

8456e95b-dae6-44ff-bb2b-75a37e16c0c7

References

About

A threat actor may guess the target credentials using a single password with a large set of usernames against the target

Topics

Resources

License

Code of conduct

Stars

Watchers

Forks

Sponsor this project