Brute force http tool

Gente aqui publico la herramienta de brute force que desarolle para el grupo de hackers/seguridad informatica, osea es del grupo descarguenla los que quieran, ahi esta el tutorial.. vean el codigo ;)
 
- Los que no saben usar SVN(deberian) https://brute-force-http.googlecode.com/svn/trunk/






Brute forcing consists of systematically enumerating all possible candidates for the solution and checking whether each candidate satisfies the problem's statement.

In web applications, we usually find a combination of user ID and password. Therefore, it's possible to carry out an attack to retrieve a valid user account and password, by trying to enumerate many (i.e., dictionary attack) or all the possible candidates.
Discovery Authentication Methods:
Unless an entity decides to apply a sophisticated web authentication, the two most commonly seen methods are as follows:
HTTP Authentication;
Basic Access Authentication Digest Access Authentication
HTML Form-based Authentication;
IN PHP.
Example:
$partytime = new bruteForceHTTP();

$partytime->setDebug(true);

$partytime->setDictionary('dictionary.txt');
// Use this comodin {PASSWORD} 
$partytime->setAccessUrl('http://www.jamesjara.com/?myusername=jamesjara&mypassword={PASSWORD}&Submit=Login');

$partytime->setTimeOut(10);
//if this word match in the result, then you are in
$partytime->setBingoKeyword('Bienvenido');

$partytime->KillerTime();

Comentarios

Entradas populares de este blog

Día Internacional de la Seguridad Informática, 30 de noviembre 2013, Nicoya

Solucion USSD Exploit - Compruebe si su celular es vulnerable

NetSleuth - en tiempo real y analizador PCAP