Terme informatique

Password Spraying

An attack that tests a small number of common passwords on many accounts.

View my favorites

Simple definition

An attack that tests a small number of common passwords on many accounts.

Technical definition

Unlike the target brute force, the spraying divides the tests to avoid quick locking.

What is it used for ?

Understand some distributed authentication chess sets.

Practical example

An attacker can test Summer2026! on hundreds of users.

Common issues

  • Detection thresholds too high
  • MFA absent
  • Common passwords

MFA · Credential stuffing

Key takeaway: Exact behavior and commands may vary depending on versions, products and architectures.

♡ 0