Directories
¶
| Path | Synopsis |
|---|---|
|
Package checkpoint provides a JSONL-backed (user, password) skip set for resumable spray runs.
|
Package checkpoint provides a JSONL-backed (user, password) skip set for resumable spray runs. |
|
Package config defines the unified Config struct, JSON loader, CLI merge, validation, and conversion to engine-ready types.
|
Package config defines the unified Config struct, JSON loader, CLI merge, validation, and conversion to engine-ready types. |
|
Package creds loads username/password/useragent files in the same formats as CredMaster.
|
Package creds loads username/password/useragent files in the same formats as CredMaster. |
|
Package engine orchestrates credential queuing, worker pools, per-attempt retry, timing hooks, and stop-on-success cancellation.
|
Package engine orchestrates credential queuing, worker pools, per-attempt retry, timing hooks, and stop-on-success cancellation. |
|
Package httpclient builds *http.Client values that route each request through a proxy.Source, with keep-alive disabled so every request gets a fresh proxy.
|
Package httpclient builds *http.Client values that route each request through a proxy.Source, with keep-alive disabled so every request gets a fresh proxy. |
|
Package notify sends events to external chat webhooks.
|
Package notify sends events to external chat webhooks. |
|
Package ntlmdecode parses NTLM Type 2 (Challenge) messages from a "WWW-Authenticate: NTLM <base64>" header.
|
Package ntlmdecode parses NTLM Type 2 (Challenge) messages from a "WWW-Authenticate: NTLM <base64>" header. |
|
Package output provides a thread-safe log sink that mirrors console output to an optional per-run console log file and appends successes / valid users to dedicated append-only files.
|
Package output provides a thread-safe log sink that mirrors console output to an optional per-run console log file and appends successes / valid users to dedicated append-only files. |
|
Package plugins defines the spray-plugin contract and a global registry.
|
Package plugins defines the spray-plugin contract and a global registry. |
|
aadsts
Package aadsts classifies Azure AD error codes (AADSTS*) into CredBaron plugin outcomes.
|
Package aadsts classifies Azure AD error codes (AADSTS*) into CredBaron plugin outcomes. |
|
adfs
Package adfs sprays AD Federation Services forms-auth endpoints.
|
Package adfs sprays AD Federation Services forms-auth endpoints. |
|
azuresso
Package azuresso sprays Azure AD Seamless SSO via the WS-Trust endpoint.
|
Package azuresso sprays Azure AD Seamless SSO via the WS-Trust endpoint. |
|
azvault
Package azvault sprays Microsoft Online targeting the Azure Key Vault resource.
|
Package azvault sprays Microsoft Online targeting the Azure Key Vault resource. |
|
ews
Package ews sprays Exchange Web Services (/ews/) via NTLM auth.
|
Package ews sprays Exchange Web Services (/ews/) via NTLM auth. |
|
fortinetvpn
Package fortinetvpn sprays a Fortinet/FortiGate VPN portal at /remote/logincheck.
|
Package fortinetvpn sprays a Fortinet/FortiGate VPN portal at /remote/logincheck. |
|
gmailenum
Package gmailenum performs Gmail/GSuite user enumeration via /mail/gxlu.
|
Package gmailenum performs Gmail/GSuite user enumeration via /mail/gxlu. |
|
httpbrute
Package httpbrute performs HTTP Basic / NTLM authentication against a target URL and classifies the result by status code.
|
Package httpbrute performs HTTP Basic / NTLM authentication against a target URL and classifies the result by status code. |
|
httppost
Package httppost is a generic POST spray plugin.
|
Package httppost is a generic POST spray plugin. |
|
msgraph
Package msgraph sprays Microsoft Online targeting the Graph API resource.
|
Package msgraph sprays Microsoft Online targeting the Graph API resource. |
|
msol
Package msol sprays Microsoft Online via the OAuth2 Resource Owner Password
|
Package msol sprays Microsoft Online via the OAuth2 Resource Owner Password |
|
o365enum
Package o365enum performs Office 365 user enumeration via GetCredentialType.
|
Package o365enum performs Office 365 user enumeration via GetCredentialType. |
|
okta
Package okta sprays the Okta primary auth endpoint.
|
Package okta sprays the Okta primary auth endpoint. |
|
owa
Package owa sprays Outlook Web Access via NTLM auth on the autodiscover endpoint.
|
Package owa sprays Outlook Web Access via NTLM auth on the autodiscover endpoint. |
|
pingfed
Package pingfed sprays a Ping Federate IdP via the two-step prp.wsf form flow.
|
Package pingfed sprays a Ping Federate IdP via the two-step prp.wsf form flow. |
|
Package proxy provides per-request proxy selection for CredBaron.
|
Package proxy provides per-request proxy selection for CredBaron. |
|
Package timing encapsulates the four CredMaster evasion features: jitter, batch, inter-password delay, and weekday-warrior.
|
Package timing encapsulates the four CredMaster evasion features: jitter, batch, inter-password delay, and weekday-warrior. |
Click to show internal directories.
Click to hide internal directories.