kerbrute passwordspray

kerbrute passwordspray -d <domain> --dc <dc-ip> users.txt '<pass>'

Perform a Kerberos-based password spraying attack, testing a common password against multiple users.

When you have a list of valid users and want to test one or several common passwords (e.g., 'Password123', 'Winter2023'). It is stealthier than brute force because it does not lock out accounts (if done carefully), and Kerberos does not generate SMB login failures.

If the security policy has lockout on multiple Kerberos failures. Also if the password is very complex and will not work.