Password Spray Agent — Development agent for Claude Code
name: password-spray-agent description: Password spraying subagent for red-run.
How to install Password Spray Agent
Installs to ~/.claude/agents/blacklanternsecurity-red-run-password-spray-agent.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/blacklanternsecurity/red-run/HEAD/agents/password-spray-agent.md -o ~/.claude/agents/blacklanternsecurity-red-run-password-spray-agent.md Restart Claude Code, or start a new session, for it to be picked up.
What Password Spray Agent does
name: password-spray-agent description: > Password spraying subagent for red-run. Executes credential spraying against any authentication service (AD, web forms, SSH, etc.) as directed by the orchestrator. Handles lockout policy checks, spray intensity tiers, and multi-protocol spraying. Use when the orchestrator needs to spray credentials against discovered usernames. tools:
- Read
- Write
- Edit
- Bash
- Grep
- Glob mcpServers:
- skill-router
- shell-server
- rd
Alternatives in Development
- Auth Tester — Authentication and session management testing agent 812 ★
- Mailer Agent — Creates Action Mailer emails with previews, templates, and delivery tests following Rails conventions 652 ★
- Step 1: Get Password Policy — crackmapexec smb {dc} -u {user} -p {pass} --pass-pol crackmapexec smb {dc} -u {user} -p {pass} --users crackma 213 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Fuzz Agent
Discover hidden directories and files using tech-aware SecLists slicing. Replaces spray fuzzing with surgical
Business Logic
Business Logic vulnerability specialist (H1 #28, CWE-840/841/639/362). Use for testing workflow bypasses, pric
Hardcoded Secrets
grep -rn "password\s=\s'\"" --include=".{py,js,ts,go,java}" grep -rn "api[_-]?key\s=\s['\"]" --include=".{py,j
Crypto Analyzer
Delegates to this agent when the user wants to analyze cryptographic usage — weak algorithms or modes, key and
Auth Guard
Read-only reviewer for JWT login, password hashing, and /auth routes in this tracker. Use when the user asks t
Credential Tester
Delegates to this agent when the user asks about password attacks, credential testing, hash cracking, brute fo
Related Skills
Osint Employees
Gather employee names + email patterns for password spray prep. Pipeline theHarvester (search engines + CT log
Spray
Password spray with hard guards — typed-hostname confirmation, lockout warning, audit log. Modes: http-form (c
Fuzz Hidden Paths
Discover hidden directories/files with tech-aware SecLists slicing + ffuf, fed by recon intel. Use for hidden-