Rapids is a modular credential spraying framework with 28 native protocol modules. Automatic port scanning, domain discovery, adaptive skip logic, and pass-the-hash support — no external tool dependencies for core functionality.
Built for fast, focused, and relentless authentication testing across large network ranges.
Rapids automatically scans ports and maps them to protocol modules for comprehensive credential testing.
# Install from PyPI $ pip install rapids # Spray single credential against CIDR range $ rapids --targets 10.10.10.0/24 --username admin --password Password123 # Multi-credential spray with user/pass lists $ rapids --targets targets.txt --userlist users.txt --passlist passwords.txt # Pass-the-hash across SMB/RDP/WinRM $ rapids --targets 10.10.10.0/24 --username administrator --hash aad3b435b51404eeaad3b435b51404ee:8846f7eaee8fb117ad06bdd830b7586c
Full CLI reference for credential spraying, module selection, and output formatting.
--targets <file|cidr>Target file, IP, or CIDR range--ports <list>Custom ports (overrides auto-scan)--exclude <file>Exclude IPs from targeting--timeout <sec>Connection timeout per attempt--username <user>Single username--password <pass>Single password--userlist <file>Username list file--passlist <file>Password list file--hash <lm:ntlm>Pass-the-hash (PTH) authentication--modules <list>Specific modules: smb,ssh,rdp,winrm,mssql--exclude-modules <list>Skip specific modules--list-modulesShow all 28 available protocol modules--output <file>Save results to file--format <type>Output format: table, json, csv--verboseShow failed attempts and debug info--connect-commandsInclude connect strings for successful authsFour-stage pipeline: port scanning to discover services, protocol mapping to modules, credential spraying with threading, and optional proof-of-access verification.
rapids/ scanner.py // nmap integration · port discovery modules/ // 28 protocol implementations ├── smb.py // impacket SMB · domain discovery ├── ssh.py // paramiko SSH client ├── rdp.py // RDP with NLA support └── database/ // mysql · postgres · mssql · mongo engine.py // threading · skip logic · results cli.py // argparse interface
Rapids is designed exclusively for authorized security testing with explicit written permission. Credential spraying generates significant authentication logs — ensure proper authorization and scope.
Security issues should be reported through private security advisories.
Adaptive skip logic prevents excessive authentication attempts against unresponsive services.