The project consists of a simple python script that allows the user to brute force the login page of the Damn Vulnerable Web Application (DVWA). The URL to the DVWA application is required. The script performs a password spraying attack thus a valid username and a wordlist of the potential password are required. The user also needs to enter the error message that pops up after a failed login. If the page requires a valid cookie session, the user can provide the cookie value. However, it is not required for the application to run.
Languages and Utilities Used
Python
Environments Used
Windows 10
Linux
Program walk-through:
Run the script: python3 .\bruteforce.py
Enter the DVWA login page URL:
Enter the username (default: admin):
Enter the file path to password wordlist:
Enter error message:
Enter cookie if needed or skip
Wait for proccess to complete: