Password spraying

Password spraying (without bruteforce)

#~ cme ssh -u userfile -p passwordfile --no-bruteforce
Expected Results:
SSH 22 [*] SSH-2.0-OpenSSH_8.2p1 Debian-4
SSH 22 [+] user:password
By default CME will exit after a successful login is found. Using the --continue-on-success flag will continue spraying even after a valid password is found. Usefull for spraying a single password against a large user list.
You can also use Hydra available by default on Kali to bruteforce SSH password, it's faster and better :)
GitHub - vanhauser-thc/thc-hydra: hydra
Copy link