CaptainCredz: modular and discreet password-spraying tool

by ddos · Published · Updated

CaptainCredz is a modular and discreet password-spraying tool, with advanced features such as a cache mechanism and a fine-grained timing control.

To start using captaincredz, the following lines may be useful:

TEXT_EDITOR=nano

git clone https://github.com/synacktiv/captaincredz
cd captaincredz
pip3 install -r requirements.txt
$TEXT_EDITOR config.json
$TEXT_EDITOR ww_config.json

python3 captaincredz.py --config config.json --weekday_warrior ww_config.json

Extending CaptainCredz

Writing your own plugin

If your identity provider is not yet supported by CaptainCredz, you may have to write your own plugin.

The best thing you can do is look at the plugins already implemented, and write your own in the same way. In particular, adapting Credmaster plugins to CaptainCredz should not be too difficult, as the functions defined are the roughly the same.

Writing your own post_action

Maybe you want to add an action after each success, like sending a Telegram message for instance. This is not yet implemented by CaptainCredz, but can be implemented fairly easily in the current state of things.

The best thing you can do is look at the basic post_actions already implemented, and write your own in the same way. Post_actions receive a variety of data from the plugin in order to implement their logic.

Install & Use

Tags: captaincredzpassword sprayingpassword-spraying toolTool