BruteSpray takes nmap GNMAP output and automatically brute-forces services with default credentials using Medusa. BruteSpray can even find non-standard ports by using the -sV inside Nmap.

Usage

First do an nmap scan with '-oA nmap.gnmap'.

Command: python brutespray.py -h

Example: python brutespray.py --file nmap.gnmap --services all --threads 3 --hosts 5

Github Project