No items found.
Password spraying is an adversarial password attack technique in which a few commonly used passwords are utilized on multiple accounts. Rather than applying multiple passwords on the same account as done in a brute force attack, multiple accounts are targeted. Password spraying can help adversaries to bypass the access controls applied, which might lock the user account if multiple wrong passwords are attempted. This technique commonly targets SSO (Single Sign-On) and cloud applications.
In a password spray attack, adversaries “spray” passwords at a large volume of usernames.
Scirge gives organizations the tools to discover and manage Shadow IT by tracking where and how corporate credentials are used across SaaS, supply-chain, GenAI, and other web applications. It helps discover Shadow SaaS and Shadow AI, and identify risks like password reuse, shared accounts, and phishing, while providing real-time awareness messages, automated workflows, and actionable insights.
