> For the complete documentation index, see [llms.txt](https://wiki.securiters.com/securiters-wiki/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://wiki.securiters.com/securiters-wiki/certificaciones/repaso-oscp/4.-spraying.md).

# 4. Spraying

### 4.1. Password Spray

CrackMapExec

```powershell
#Spray As Domain user
crackmapexec smb <IP> -d <domain> -u users.txt -p passwords.txt

#Spray As Local user
crackmapexec smb <IP> -u users.txt -p passwords.txt --local-auth
```

### 4.2. Hash Spray

CrackMapExec

```powershell
#Spray As Domain user
crackmapexec smb <IP> -d <domain> -u users.txt -H hashes.txt

#Spray As Local user
crackmapexec smb <IP> -u users.txt -H hashes.txt --local-auth
```