{"id":13843665,"url":"https://github.com/aas-n/spraykatz","last_synced_at":"2025-07-11T19:32:54.750Z","repository":{"id":41546421,"uuid":"207331104","full_name":"aas-n/spraykatz","owner":"aas-n","description":"Credentials gathering tool automating remote procdump and parse of lsass process.","archived":false,"fork":false,"pushed_at":"2020-06-20T12:14:00.000Z","size":22063,"stargazers_count":748,"open_issues_count":5,"forks_count":122,"subscribers_count":27,"default_branch":"master","last_synced_at":"2024-08-05T17:38:33.706Z","etag":null,"topics":["credentials","love","lsass","mimikatz","minidump","procdump","pypykatz","spray"],"latest_commit_sha":null,"homepage":"https://twitter.com/aas_s3curity","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aas-n.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2019-09-09T14:38:28.000Z","updated_at":"2024-07-24T04:34:58.000Z","dependencies_parsed_at":"2022-09-09T08:11:57.782Z","dependency_job_id":null,"html_url":"https://github.com/aas-n/spraykatz","commit_stats":null,"previous_names":[],"tags_count":5,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aas-n%2Fspraykatz","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aas-n%2Fspraykatz/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aas-n%2Fspraykatz/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aas-n%2Fspraykatz/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aas-n","download_url":"https://codeload.github.com/aas-n/spraykatz/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225755079,"owners_count":17519195,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["credentials","love","lsass","mimikatz","minidump","procdump","pypykatz","spray"],"created_at":"2024-08-04T17:02:22.754Z","updated_at":"2024-11-21T15:31:20.671Z","avatar_url":"https://github.com/aas-n.png","language":"Python","funding_links":[],"categories":["Python (1887)","Python"],"sub_categories":[],"readme":"\u003ch1 align=\"center\"\u003e\n  \u003cbr\u003e\n  \u003ca href=\"https://github.com/aas-n/spraykatz/\"\u003e\u003cimg src=\"https://i.ibb.co/W6Lj3PK/cat.png\" alt=\"Spraykatz\"\u003e\u003c/a\u003e\n  \u003cbr\u003e\n  Spraykatz\n  \u003cbr\u003e\n\u003c/h1\u003e\n\n\u003ch4 align=\"center\"\u003eSpray love around the world\u003c/h4\u003e\n\u003cp align=\"center\"\u003e\n  \u003ca href=\"https://github.com/aas-n/spraykatz\"\u003e\n    \u003cimg src=\"https://img.shields.io/badge/Release-0.9.9-green.svg\"\u003e\n  \u003c/a\u003e\n  \u003ca href=\"https://twitter.com/aas_s3curity\"\u003e\n    \u003cimg src=\"https://img.shields.io/badge/Twitter-aas-blue.svg\"\u003e\n  \u003c/a\u003e\n  \u003ca href=\"https://akerva.com\"\u003e\n    \u003cimg src=\"https://img.shields.io/badge/Thanks-Akerva-red.svg\"\u003e\n  \u003c/a\u003e\n\u003c/p\u003e\n\n\n### Index\n| Title        | Description   |\n| ------------- |:-------------|\n| [About](#about)  | Brief Description about the tool |\n| [Installation](#installation)  | Installation and Requirements |\n| [Usage](#using-spraykatz)  | How to use Spraykatz |\n| [Changelog](#changelog)  | Spraykatz changelog |\n| [Acknowlegments](#acknowlegments)  | Acknowlegments |\n\n### About \nSpraykatz is a tool without any pretention able to **retrieve credentials** on Windows machines and large Active Directory environments.\n\nIt simply tries to __procdump__ machines and __parse dumps remotely__ in order to **avoid detections** by antivirus softwares as much as possible.\n\n### Installation\nThis tool is written for **`python3 to python3.6`**. Do not use this on production environments!\n#### Ubuntu\nOn a fresh updated Ubuntu.\n```bash\napt update\napt install -y python3.6 python3-pip git nmap\ngit clone https://github.com/aas-n/spraykatz.git\ncd spraykatz\npip3 install -r requirements.txt\n```\n\n### Using Spraykatz\nA quick start could be:\n```bash\n./spraykatz.py -u H4x0r -p L0c4L4dm1n -t 192.168.1.0/24\n```\n\n\u003ch3 align=\"center\"\u003e\n  \u003ca href=\"https://github.com/aas-n/spraykatz\"\u003e\u003cimg src=\"preview.gif\" alt=\"Spraykatz\"\u003e\u003c/a\u003e\n\u003c/h3\u003e\n\n#### Mandatory arguments\n| Switches | Description |\n| -------|:--------|\n| -u, --username | User to spray with. He must have admin rights on targeted systems in order to gain remote code execution. |\n| -p, --password | User's password or NTLM hash in the `LM:NT` format. |\n| -t, --targets | IP addresses and/or IP address ranges. You can submit them via a file of targets (one target per line), or inline (separated by commas). |\n\n#### Optional arguments\n| Switches | Description |\n| -------|:--------|\n| -d, --domain | User's domain. If he is **not** member of a domain, simply use `-d .` instead. |\n| -r, --remove | Only try to clean up ProcDump and dumps left behind on distant machines. Just in case. |\n| -v, --verbosity | Verbosity mode {warning, info, debug}. Default == info. |\n| -w, --wait  | How many seconds Spraykatz waits before exiting gracefully. Default is 180 seconds. |\n\n### Changelog\n```\nVersion 0.9.9\n=============\n- Removing impacket submodules (just use pip).\n\nVersion 0.9.8\n=============\n- ProcDump binaries are not embedded anymore. Spraykatz ask for downloading them now.\n\nVersion 0.9.7\n=============\n- adding the \"-r\" switch to remove procdump \u0026 dumps left behind, just in case.\n- adding the \"-w\" switch to specify a timeout before exiting gracefully.\n- Debug mode enhanced\n- Bugs fixes\n```\n\n### Acknowlegments  \nSpraykatz uses slighlty modified parts of the following projects:\n* [Impacket](https://github.com/SecureAuthCorp/impacket)\n* [Pypykatz](https://github.com/skelsec/pypykatz)\n* [Pywerview](https://github.com/the-useless-one/pywerview)\n* [Sysinternals](https://docs.microsoft.com/en-us/sysinternals/downloads/)\n\nThanks:\n* [Gentil Kiwi](http://blog.gentilkiwi.com/)\n* [hackndo](https://beta.hackndo.com/)\n\n#\nWritten by [aas](https://twitter.com/aas_s3curity)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Faas-n%2Fspraykatz","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Faas-n%2Fspraykatz","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Faas-n%2Fspraykatz/lists"}