Skip to content

Password spraying

Kerbrute

Kerbrute contains multiple commands to enumerate users or bruteforce accounts. Add --safe to abort passwordsparying or bruteforcing if one account is marked as locked. Check out kerbrute.exe -h for more.

kerbrute.exe passwordspray -d lab.local users.txt Winter2026