Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

RTT· red team

RTT · red team

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Search techniques, tools, commands…⌘K

No scenario

No scenario · all techniques in scope

IdleStatus

0Scenarios

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Back to Tools

msspray.py

Credential Harvester

Credentials & User Impersonation

MSSpray is an archived Python 3 utility that uses legacy ADAL resource-owner password credentials (ROPC) to test one password against a user file or check one test credential across a built-in list of Azure and Microsoft 365 endpoints. It is no longer developed; Microsoft discourages ROPC, and the tool's first listed Azure AD Graph endpoint was retired in 2025. The source writes returned tokens to local logs, so use only disposable credentials in an isolated, authorized test tenant.

Source

https://github.com/SecurityRiskAdvisors/msspray

Language

Python

References

github.com raw.githubusercontent.com raw.githubusercontent.com learn.microsoft.com learn.microsoft.com

+2 more

Extended Details

RESTRICTED_ACCESS_BLUR_MARKER