gospray - Simple LDAP bind-based password spray tool
infonews
security
Source: Embrace The RedSeptember 18, 2022
Summary
Gospray is a tool designed to test credentials by attempting to log into domain controllers (the central servers that manage network access) using LDAP bind (a method for authenticating directly against these servers). Unlike some other credential-testing approaches, it communicates quietly and directly with the domain controller without needing other servers as intermediaries, and it allows configurable levels of parallel attempts.
Classification
Attack SophisticationModerate
Original source: https://embracethered.com/blog/posts/2022/gospray-active-directory-ldap-password-spraying/
First tracked: February 12, 2026 at 02:20 PM
Classified by LLM (prompt v3) · confidence: 95%