DomainPasswordSpray vs THC Hydra
GitHub Stats
About DomainPasswordSpray
DomainPasswordSpray is a PowerShell tool that performs password spray attacks against Active Directory domain user accounts. Unlike credential stuffing which tries many passwords against one account, password spraying tries one password against all accounts to avoid lockout policies. The tool automatically enumerates domain users, respects account lockout thresholds and observation windows, and can target specific organizational units or groups. It outputs successful credentials and supports custom password lists. Lockout-aware design makes it safer than manual spraying approaches.
About THC Hydra
THC Hydra is the most widely used online password brute-forcing tool. It supports over 50 protocols including SSH, FTP, HTTP, HTTPS, SMB, MySQL, MSSQL, PostgreSQL, LDAP, RDP, VNC, and many more. Hydra is fast and flexible, supporting parallel connections and multiple attack types. It's an essential tool for penetration testers verifying password policies and testing authentication mechanisms.
Platform Support
Tags
DomainPasswordSpray only
THC Hydra only