> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Brutespray: Bruteforcing from various scanner output - Automatically attempts default creds on found services
- URL: https://darkwebinformer.com/brutespray-bruteforcing-from-various-scanner-output-automatically-attempts-default-creds-on-found-services/
- Published: 2025-03-05T17:47:11.000Z
- Updated: 2025-09-04T22:23:36.000Z
- Author: Dark Web Informer
- Tags: Tools

# Brutespray

[](https://github.com/x90skysn3k/brutespray#brutespray)

[](https://camo.githubusercontent.com/cd1f763eb7deacdacd6620fd9f7bdbcf0e221b9ef1453b31d15a535f36233024/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f56657273696f6e2d322e332e312d726564)[](https://github.com/x90skysn3k/brutespray/actions/workflows/release.yml)[](https://goreportcard.com/report/github.com/x90skysn3k/brutespray)

Created by: Shane Young/@t1d3nio && Jacob Robles/@shellfail

Inspired by: Leon Johnson/@sho-luv

# Description

[](https://github.com/x90skysn3k/brutespray#description)

Brutespray has been re-written in Golang, eliminating the requirement for additional tools. This enhanced version is more extensive and operates at a significantly faster pace than its Python counterpart. As of now, Brutespray accepts input from Nmap's GNMAP/XML output, newline-separated JSON files, Nexpose's XML Export feature, Nessus exports in .nessus format, and various lists. Its intended purpose is for educational and ethical hacking research only; do not use it for illegal activities.

![](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2025/03/0982350980921.png)

# Install

[](https://github.com/x90skysn3k/brutespray#install)

```
go install github.com/x90skysn3k/brutespray@latest

```

[Release Binaries](https://github.com/x90skysn3k/brutespray/releases)

To Build:

```
go build -o brutespray main.go

```

# Usage

[](https://github.com/x90skysn3k/brutespray#usage)

If using Nmap, scan with `-oA nmap_out`. If using Nexpose, export the template `XML Export`.

If using Nessus, export your `.nessus` file.

Command: `brutespray -h`

Command: `brutespray -f nmap.gnmap -u userlist -p passlist`

Command: `brutespray -f nmap.xml -u userlist -p passlist`

Command: `brutespray -H ssh://127.0.0.1:22 -u userlist -p passlist`

Command: `brutespray -H ssh://127.0.0.1 -C root:root`

# Examples

[](https://github.com/x90skysn3k/brutespray#examples)

![](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2025/03/0923850980922.gif)

#### Using Custom Wordlists:

[](https://github.com/x90skysn3k/brutespray#using-custom-wordlists)

`brutespray -f nmap.gnmap -u /usr/share/wordlist/user.txt -p /usr/share/wordlist/pass.txt -t 5`

#### Brute-Forcing Specific Services:

[](https://github.com/x90skysn3k/brutespray#brute-forcing-specific-services)

`brutespray -f nmap.gnmap -u admin -p password -s ftp,ssh,telnet -t 5`

#### Specific Credentials:

[](https://github.com/x90skysn3k/brutespray#specific-credentials)

`brutespray -f nmap.gnmap -u admin -p password -t 5`

#### Use Nmap XML Output

[](https://github.com/x90skysn3k/brutespray#use-nmap-xml-output)

`brutespray -f nmap.xml -u admin -p password -t 5`

#### Use JSON Output

[](https://github.com/x90skysn3k/brutespray#use-json-output)

`brutespray -f out.json -u admin -p password -t 5`

#### Bruteforce a CIDR range

[](https://github.com/x90skysn3k/brutespray#bruteforce-a-cidr-range)

`brutespray -H ssh://10.1.1.0/24:22 -t 1000`

#### Socks5 Proxy Support

[](https://github.com/x90skysn3k/brutespray#socks5-proxy-support)

`brutespray -H ssh://10.1.1.0/24:22 -socks5 localhost:1080`

#### Network Interface Support

[](https://github.com/x90skysn3k/brutespray#network-interface-support)

`brutespray -H ssh://10.1.1.0/24:22 -iface tun0`

#### Print Found Services

[](https://github.com/x90skysn3k/brutespray#print-found-services)

`brutespray -f nessus.nessus -P -q`

![](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2025/03/0982350980923.png)

# Supported Services

[](https://github.com/x90skysn3k/brutespray#supported-services)

- ssh
- ftp
- telnet
- mssql
- postgresql
- imap
- pop3
- smbnt
- smtp
- snmp
- mysql
- vmauthd
- vnc
- mongodb
- nntp
- asterisk
- teamspeak
- oracle
- xmpp
- rdp

# Services in Beta

[](https://github.com/x90skysn3k/brutespray#services-in-beta)

- asterisk
- nntp
- oracle
- xmpp
- rdp (currently local domain is supported)

Feel free to open an issue if these work, or if you have any issues

# Data Specs

[](https://github.com/x90skysn3k/brutespray#data-specs){"host":"127.0.0.1","port":"3306","service":"mysql"}  
{"host":"127.0.0.10","port":"3306","service":"mysql"}

If using Nexpose, export the template `XML Export`.

If using Nessus, export your `.nessus` file.

List example

```
ssh:127.0.0.1:22
ftp:127.0.0.1:21
...

```

Combo wordlist example

```
user:pass
user1:pass1
user2:pass2
user3:pass
user4:pass1
...

```

# Planned Features

[](https://github.com/x90skysn3k/brutespray#planned-features)

- Add domain option for RDP, SMB
- Ability to set proxy
- Ability to select interface
- More modules
- Better connection handling