kamar101 / bruteforcer-password-spraying

Bruteforcer - Password Spraying

Description

The project consists of a simple python script that allows the user to brute force the login page of the Damn Vulnerable Web Application (DVWA). The URL to the DVWA application is required. The script performs a password spraying attack thus a valid username and a wordlist of the potential password are required. The user also needs to enter the error message that pops up after a failed login. If the page requires a valid cookie session, the user can provide the cookie value. However, it is not required for the application to run.

Languages and Utilities Used

• Python

Environments Used

• Windows 10
• Linux

Program walk-through:

Run the script: python3 .\bruteforce.py


Enter the DVWA login page URL:


Enter the username (default: admin):


Enter the file path to password wordlist:


Enter error message:


Enter cookie if needed or skip

Wait for proccess to complete: