Are you an LLM? You can read better optimized documentation at /pentesting-manual/active-directory/credential-access/password-spraying.md for this page in Markdown format
Password spraying
Kerbrute
Kerbrute contains multiple commands to enumerate users or bruteforce accounts. Add --safe to abort passwordsparying or bruteforcing if one account is marked as locked. Check out kerbrute.exe -h for more.
kerbrute.exe passwordspray -d lab.local users.txt Winter2026