Skip to content

Usage_Formats

CausticKirbyZ edited this page Aug 2, 2022 · 5 revisions

Credential Input Formats:

--user-as-password

This should be self explanatory.... it will use the username as the password (duh) .

*now that i think about it... i should also add a flag for using just the username without the @domain.com part of an email.... added in 1.1.0

--user-pass-format

This will read the provided file in format user:password (yes you can still have ':' in the password and it will still work) and will spray the corresponding username with its password. This works great for accounts and passwords found in prior breaches.

--strip-user-string, --strip-pass-string

This was an added to be able to strip usernamas and passwords in real time without needing to modify the source file. useful in --user-as-password when using emails.

Example:

command: --strip-pass-string @domain.com --user-as-password

input:

username@domain.com 
username2@domain.com

What is sprayed:
username@domain.com : username
username2@domain.com : username2