knavesec/CredMaster

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1290 stars · 173 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

CredMaster is a Python CLI tool for password spraying and brute-force attacks that rotates the source IP address on every authentication attempt using dynamically generated FireProx AWS passthrough proxies. It includes plugins for services like OWA, EWS, ADFS, MSOL, and Azure endpoints, plus lockout evasion and notification features.

Use cases

• spray passwords against O365 or Azure AD without getting IP-blocked
• brute force OWA or EWS logins during a pentest
• evade account lockout policies with timed spraying
• rotate IPs per authentication attempt via AWS proxies
• enumerate valid Office365 users without authenticating
• get notified on Slack or Discord when valid credentials are found

When to choose

• you need evasive password spraying with per-request IP rotation
• you're doing authorized red-team or pentest work against Microsoft auth endpoints
• you want lockout policy evasion and timed spray scheduling built in

When to avoid

• you have no AWS account or don't want to incur Lambda/API Gateway costs
• you need a general-purpose web brute forcer rather than auth-spray plugins
• your use is unauthorized - this is for authorized security testing only

Facets

cli-tool · maturity active

security http-client cli penetration-testing security python cli cloud password-spraying brute-force fireprox aws-proxy red-team credential-stuffing evasion

Member repositories

For agents

markdown · JSON · MCP: product_card(name="knavesec/CredMaster")