This Python script is a simple web login bruteforce tool that attempts to find the correct username and password for a given page URL.
-
Setup:
-
Install the required modules by running:
pip install requests termcolor
-
-
Run the Script:
-
Execute the
bruteforce.py
script with the following command-line arguments:python bruteforce.py <URL> <Username> <PasswordFile> <LoginFailedString> [<CookieValue>]
- URL: The URL of the login page.
- Username: The target username for bruteforcing.
- Password File: The file containing the list of passwords to try.
- Login Failed String: String that indicates a login failure.
- Cookie Value (Optional): Provide a cookie value if needed for the request.
-
-
Output:
- The script will print the attempts and notify you if a valid username and password are found.
bruteforce.py
: Contains the bruteforce script.passwords.txt
: Example password file.
requests
: HTTP library for making requests.termcolor
: Colored output for the terminal.
This script is for educational purposes only. Unauthorized access to systems or accounts is illegal and unethical. Use responsibly and only on systems you have explicit permission to test.