Automating brute force with BruteSpray

BruteSpray is another open source tool which is built on Python. It takes the input from an Nmap scan and automatically brute forces the services running with default credentials using Medusa.

How to do it...

Let's perform the following steps:

1. Run the following command to install brutespray on Kali:

apt install brutespray 

The following screenshot shows the output of the preceding command:

2. Once it is installed, we can run the tool with the -h flag to view the list of all features.
3. To run a default brute force on all of the services that were discovered by a previously run Nmap scan, we can use the following command:

brutespray --file scan.xml --threads 5

The following screenshot...