MSOLSpray

MSOLSpray is an unversioned PowerShell script that sends one supplied password to each username in a list using the legacy Microsoft Online OAuth 2.0 resource-owner password-credentials (ROPC) grant. It interprets response codes as credential, account, tenant, MFA, Conditional Access, or password-expiration indicators; the source labels some challenge and error responses as success, so those indicators do not prove that an interactive sign-in completed. The script prints supplied username/password pairs for success-classified responses. Microsoft recommends against ROPC and documents that MFA and Conditional Access are unsupported by the flow. Its password-spraying behavior maps to ATT&CK T1110.003.