Password Spray:用同個密碼暴力打所有的 username

在「Simplifying Password Spraying」這篇看到,原來這個叫做 Password Spray...

To give a little background, traditional brute force attacks of one username with multiple passwords don't work very well against Windows services. This is because they employ lockout functionality after a set number of login attempts. A Password Spray circumvents the lockout functionality by trying only a few of the most common passwords against multiple user accounts, trying to identify that one person who is using 'Password1' or 'Summer2017'.

這個方法可以避開在同一個帳號的防禦機制...

This entry was posted in Computer, Murmuring, Network, Security, Service and tagged , , . Bookmark the permalink.

Leave a Reply

Your email address will not be published. Required fields are marked *