BRUTESPRAY(8)

✨ BRUTESPRAY ✨

okay bestie, welcome to the brutespray(8) page — yes she's a section 8 system manager's manual girlie, and yes she is that girl 🎀

---

🌸 NAME 🌸

brutespray — the Python bruteforce tool 💅

---

🦋 SYNOPSIS 🦋

brutespray [Usage]: brutespray [-h] -f FILE [-o OUTPUT] [-s SERVICE] [-t THREADS] [-T HOSTS] [-U USERLIST] [-P PASSLIST] [-u USERNAME] [-p PASSWORD] [-c] [-i] [-C HOST:USERNAME:PASSWORD] [-v LEVEL] [-w LEVEL]

---

💖 DESCRIPTION 💖

so the whole vibe is this: BruteSpray takes your nmap GNMAP/JSON/XML output and automatically brute-forces services with default credentials using Medusa. no cap, it just does it for you 😭✨

and the truly iconic part? BruteSpray can even find non-standard ports by using the -sV inside Nmap. she's nosy in the best way 🔥

• -f FILE, --file FILE — the GNMAP, JSON or XML file you want her to parse 📂
• -o OUTPUT, --output OUTPUT — the directory where the successful attempts go to live their truth 🏆
• -s SERVICE, --service SERVICE — pick exactly which service to attack, queen 🎯
• -t THREADS, --threads THREADS — how many medusa threads you're bringing to the party 🧵
• -T HOSTS, --hosts HOSTS — how many hosts get tested concurrently, main character multitasking energy 👑
• -U USERLIST, --userlist USERLIST — point her at a custom username file 📝
• -P PASSLIST, --passlist PASSLIST — point her at a custom password file 🔑
• -u USERNAME, --username USERNAME — specify a single username, just one, simple and chic ✨
• -p PASSWORD, --password PASSWORD — specify a single password, same energy 💅
• -c, --continuous — keep brute-forcing even after a success. she does not stop, she does not rest 🫶
• -C HOST:USERNAME:PASSWORD, --combo HOST:USERNAME:PASSWORD — specify a combo input (host:username:password) 🎀
• -i, --interactive — interactive mode 🦋
• -v LEVEL, --verbose LEVEL — verbose output from medusa. can be set from 0 to 6 (default to 5) 🗣️
• -w LEVEL, --debug LEVEL — debug error output from medusa. can be set from 0 to 10 (default to 5) 🐛

Commands: 🧚

• brutespray -h
• brutespray --file nmap.gnmap
• brutespray --file nmap.xml
• brutespray --file nmap.xml -i

---

🌈 EXAMPLES 🌈

Nmap network scanning example:

nmap -sS -sV 192.168.0.0/24 -vv -n -oA mynetwork

Using Custom Wordlists:

brutespray --file mynetwork.gnmap -U /usr/share/brutespray/wordlist/user.txt -P /usr/share/brutespray/wordlist/pass.txt --threads 5 --hosts 5

Brute-Forcing Specific Services:

brutespray --file mynetwork.gnmap --service ftp,ssh,telnet --threads 5 --hosts 5

Specific Credentials:

brutespray --file mynetwork.gnmap -u admin -p password --threads 5 --hosts 5

Continue After Success:

brutespray --file mynetwork.gnmap --threads 5 --hosts 5 -c

Use Nmap XML Output:

brutespray --file mynetwork.xml --threads 5 --hosts 5

Interactive Mode:

brutespray --file mynetwork.xml -i

---

⭐ SEE ALSO ⭐

• On github https://github.com/x90skysn3k/brutespray 🐙
• nmap(1) — the other legend, go say hi 💜

---

🌸 MANPAGE AUTHOR 🌸

Stephane Neveu stefneveu@gmail.com — thank you for your service, we're obsessed 🫶

---

and that's the whole page, bestie!! this manual is from December 2025, straight out of the System Manager's Manual — BRUTESPRAY(8), periodt. go brute-force responsibly, mwah 💖✨