Azure AD Password Sprayer

Azure AD Password Sprayer

Password spraying optimizado for Azure AD with evasion of protecciones:

n
• Smart lockout evasion — Respeta thresholds of lockout, distribuye intentos in the tiempo, detects lockout and pauses automaticmente.
n
• IP rotation — Soporte for proxy list, Tor, and cloud functions (AWS Lambda, Azure Functions) for distribuir origin of requests.
n
• MFA detection — Identifica countss with MFA enabled vs disabled. Prioriza the without MFA.
n
• Endpoints multiple — Spray against: login.microsoftonline.com, autologon.microsoftazuread-sso.com, graph.microsoft.com.
n
• User enumeration — Enumeration previa of users valids via GetCredentialType API (no generates logs of auth).
n
• Output — Credentials valids with metadata: MFA status, conditional access policies detectsdas, tenant info.
n