- Home
- Tools
- Security Operations
- Offensive Security
- SprayingToolkit
SprayingToolkit
A collection of Python scripts for password spraying attacks against Lync/S4B & OWA, featuring Atomizer, Vaporizer, Aerosol, and Spindrift tools.

SprayingToolkit
A collection of Python scripts for password spraying attacks against Lync/S4B & OWA, featuring Atomizer, Vaporizer, Aerosol, and Spindrift tools.
SprayingToolkit Description
SprayingToolkit is a collection of Python scripts/utilities that facilitate password spraying attacks against Lync/S4B & OWA, making the process quicker, less painful, and more efficient. The toolkit consists of four tools: 1. Atomizer: A fast password sprayer for Lync/Skype For Business and OWA, built on Asyncio and Python 3.7. 2. Vaporizer: A port of @OrOneEqualsOne's GatherContacts Burp extension to mitmproxy, which scrapes Google and Bing for LinkedIn profiles, generates emails, and performs password sprays in real-time. 3. Aerosol: A tool that scrapes all text from a target website and sends it to AWS Comprehend for analysis to generate custom wordlists for password spraying. 4. Spindrift: A tool that converts names to active directory usernames. These tools can be used for various password spraying attacks and reconnaissance activities.
SprayingToolkit FAQ
Common questions about SprayingToolkit including features, pricing, alternatives, and user reviews.
SprayingToolkit is A collection of Python scripts for password spraying attacks against Lync/S4B & OWA, featuring Atomizer, Vaporizer, Aerosol, and Spindrift tools.. It is a Security Operations solution designed to help security teams with Password Spraying, Reconnaissance, Password Cracking.
ALTERNATIVES
An open-source framework that enables building and deploying AI security tools
GraphSpy is a browser-based post-exploitation tool for Azure Active Directory and Office 365 environments that enables token management, reconnaissance, and interaction with Microsoft 365 services.
LinksDumper extracts links and endpoints from HTTP responses to support web application security testing and reconnaissance activities.
DNS reconnaissance tool checking DNS records, subdomains, and third-party svcs
POPULAR
TRENDING CATEGORIES
Stay Updated with Mandos Brief
Get strategic cybersecurity insights in your inbox