Skip to content

SprayTypes

CausticKirbyZ edited this page Apr 17, 2022 · 1 revision

SprayCannon supports a wide variety of web based service authentications. The list of supported services will grow and hopefully evolve as time moves forward.

Docs for all modules will be a constant work in progress. But for now heres a brief overview:

Type MFA support lockout detection fully implemented
ExchangeEAS no no yes
ExchangeOWA no no yes (could be a little more refined but fully working)
adfs_forms no no yes
SonicwallVirtualOffice no no yes (no mfa though) (validation not confirmed)
Sonicwall(the digest one) no no yes(validation not confirmed)
O365 YES YES yes
SSLVPN Cisco no no yes ( i converted some code from a previous spraying ruby script i wrote that worked. but havent had a chance to test this one) confirmed with group= --domain flag.
VPN Fortinet no no kinda(use at own risk)(validataion not confirmed)
Spiceworks no no no(no mfa/lockout though)(validataion not confirmed)
InfinateCampus no no yes
Global Protect no no not fully tested
ESXI (root web) no no (default is 10 be carefull) yes - tested with esxi 6.5,7.0
VmWare Horizon (Domain Joined Web prompt) no no yes