# A repository of tools for pentesting of restricted and isolated environments

**URL:** <https://onehack.st/t/a-repository-of-tools-for-pentesting-of-restricted-and-isolated-environments/87910>\
**Category:** Tools & Scripts\
**Tags:** cracking\
**Created:** [May 22, 2020, 11:09pm UTC](https://onehack.st/t/a-repository-of-tools-for-pentesting-of-restricted-and-isolated-environments/87910 "2020-05-22T23:09:32Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jenna](https://onehack.st/user_avatar/onehack.st/jenna/32/166322_2.png) [@Jenna](https://onehack.st/u/Jenna)\
**Post date:** [May 22, 2020, 11:09pm UTC](https://onehack.st/t/a-repository-of-tools-for-pentesting-of-restricted-and-isolated-environments/87910/1 "2020-05-22T23:09:32Z")

</div>

# Minimalistic SMB login bruteforcer (smblogin.ps1)

A simple SMB login attack and password spraying tool.

[![](https://www.infosecmatter.com/wp-content/uploads/2020/05/smblogin-2-results.png) ](https://www.infosecmatter.com/wp-content/uploads/2020/05/smblogin-2-results.png)

From the above screenshot we can see that we have obtained administrative access to 5 machines.

It takes a list of targets and credentials (username and password) as parameters and it tries to authenticate against each target using the provided credentials.

Despite its minimalistic design, the tool keeps track of everything by writing every result into a text file. This allows the tool to be easily resumed if it was interrupted or skip already compromised targets.

See the main article for detailed description:

> **[SMB Brute Force Attack Tool in PowerShell (SMBLogin.ps1) - InfosecMatter](https://www.infosecmatter.com/smb-brute-force-attack-tool-in-powershell-smblogin-ps1/)**
>
> SMBLogin.ps1 is a SMB brute force attack and password spraying tool written in PowerShell, ideal for pentesting of restricted and isolated environments.

## Conclusion

With a little bit of coding, we can come up with all kinds of useful tools.

In this case, we have created a tool which allows us to perform SMB login and password spraying attacks even in environments where no tool is allowed to enter.

This particular tool has helped us on numerous occasions during pentests and with a little bit of effort we could easily modify it or add additional features.

Hope you will find it useful too sometimes during your engagements!

[https://github.com/InfosecMatter/Minimalistic-offensive-security-tools](https://github.com/InfosecMatter/Minimalistic-offensive-security-tools)