# Offensive Security

Published articles for Offensive Security.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Brutus Expands Credential Testing and Identity Enumeration Across More Protocols

DevFeed: [Brutus Expands Credential Testing and Identity Enumeration Across More Protocols](<https://devfeed.tech/articles/credentials-are-still-the-shortest-path-in-51388.md>)

Original publisher: [Read original article](<https://www.praetorian.com/blog/credential-testing-brutus/>)

Author: Michelle Rhodes

Published: 2026-09-17T01:40:16Z

Content type: release

Language: en

Sources: [Praetorian](<https://devfeed.tech/sources/praetorian.md>)

Topics: [passwords](<https://devfeed.tech/topics/passwords.md>), [account](<https://devfeed.tech/topics/account.md>), [protocols](<https://devfeed.tech/topics/protocols.md>), [Network](<https://devfeed.tech/topics/network.md>), [Messaging](<https://devfeed.tech/topics/messaging.md>), [Kafka](<https://devfeed.tech/topics/kafka.md>), [Memcached](<https://devfeed.tech/topics/memcached.md>), [microsoft 365](<https://devfeed.tech/topics/microsoft-365.md>), [MQTT](<https://devfeed.tech/topics/mqtt.md>), [email](<https://devfeed.tech/topics/email.md>), [GitHub](<https://devfeed.tech/topics/github.md>)

Tags: [account](<https://devfeed.tech/tags/account.md>), [active-directory](<https://devfeed.tech/tags/active-directory.md>), [attack-surface-management](<https://devfeed.tech/tags/attack-surface-management.md>), [breach](<https://devfeed.tech/tags/breach.md>), [credential-discovery](<https://devfeed.tech/tags/credential-discovery.md>), [credentials](<https://devfeed.tech/tags/credentials.md>), [dump](<https://devfeed.tech/tags/dump.md>), [github](<https://devfeed.tech/tags/github.md>), [identity-and-access-management](<https://devfeed.tech/tags/identity-and-access-management.md>), [kafka](<https://devfeed.tech/tags/kafka.md>), [memcached](<https://devfeed.tech/tags/memcached.md>), [messaging](<https://devfeed.tech/tags/messaging.md>), [microsoft-365](<https://devfeed.tech/tags/microsoft-365.md>), [mqtt](<https://devfeed.tech/tags/mqtt.md>), [network](<https://devfeed.tech/tags/network.md>), [offensive-security](<https://devfeed.tech/tags/offensive-security.md>), [password](<https://devfeed.tech/tags/password.md>), [praetorian-guard-platform](<https://devfeed.tech/tags/praetorian-guard-platform.md>)

### AI overview

Praetorian describes updates to Brutus, a credential-testing engine that discovers organizational identities, tests credentials across services, and retains confirmed results for future runs. The release adds identity-enumeration capabilities, proxy support, and credential testing for fourteen additional protocols, including messaging, data, caching, industrial, and infrastructure systems.

### Source excerpt

How Brutus grew into an engine that finds your identities, tests them everywhere they're accepted, and remembers what it confirms. An attacker rarely needs a novel exploit when a valid username and password pair is sitting in a breach dump, reused across a dozen internal services, or left at a vendor default nobody changed. Brutus [...] The post Credentials Are Still the Shortest Path In appeared first on Praetorian.