credential-attack

Name: credential-attack
Availability: InStock
Author: 0xHaaz

Identify login credentials and test them via password spray against web authentication endpoints.

1|Updated Jun 22, 2026

Search Tags:#vulnerability testing #credential attack #bug bounty #security research #password spray

Ready to run

npx skills add https://github.com/0xhaaz/bug-bounty-toolkit --skill credential-attack-0xhaaz

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: credential-attack
Source: https://github.com/0xhaaz/bug-bounty-toolkit/tree/main/skills/credential-attack
Command: npx skills add https://github.com/0xhaaz/bug-bounty-toolkit --skill credential-attack-0xhaaz

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires cewler, hashcat, theharvester, trevorspray, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill provides a comprehensive toolkit for conducting credential attacks during bug bounty hunting, helping security researchers identify vulnerabilities related to authentication and password guessing.

Core Features & Use Cases

Password Spray Methodology: Offers a methodology for password spray attacks, including wordlist generation, breach check, OSINT analysis, and actual spray execution.
Mode Selection: Allows users to select between different spray modes (HTTP form, OAuth, O365, Okta) based on the target's authentication system.
Legal Guardrails: Includes guidelines for conducting credential attacks within legal and ethical boundaries.

Quick Start

To start a credential attack on 'target.com', use the following command: credential-attack --target target.com

Frequently Asked Questions about credential-attack

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

What is a password spray attack and how does it apply to bug bounty hunting?▼

A password spray attack tests many usernames against a single common password to avoid account lockouts. In bug bounty hunting, this methodology identifies weak authentication vulnerabilities on web applications with login endpoints.

How do I perform a credential attack on a target web application?▼

To perform a credential attack, execute the command `credential-attack --target target.com`. The process involves wordlist generation, OSINT analysis, breach checks, and password spray execution against the specified target.

Does this credential attack methodology support testing OAuth and Okta endpoints?▼

Yes, this credential attack methodology supports testing multiple authentication endpoints. It includes specific spray modes for HTTP forms, OAuth, O365, and Okta to match the target web application's authentication system.

What tools do I need to run a password spray attack for security research?▼

Running a password spray attack requires multiple script components and dependencies, including cewler, theharvester, trevorspray, and hashcat. These tools facilitate different stages of the attack, from OSINT analysis to execution.

Are there legal guidelines for conducting credential testing during bug bounty programs?▼

Yes, the credential attack process includes legal guardrails and guidelines. These ensure security researchers conduct password spraying and vulnerability testing within ethical and legal boundaries during bug bounty hunting.

Why use a password spray methodology instead of a traditional dictionary attack?▼

A password spray methodology is preferred for bug bounty hunting because it tests one password across many accounts, minimizing the risk of triggering lockout policies compared to traditional dictionary attacks against a single account.