luqmanyasin / simple-bruteforce-script Goto Github PK

For a proper bruteforce attempt, the user usually uses a list of passwords and tries their luck. This script currently creates it's own combination list based on a set of characters. Using a predefined list increases the chance of cracking the password.

Need to add:

• Upload combination list
• Combination list

More than six characters for a combination seem to slow down processing massively.

Maybe:

• Use pure JavaScript for faster load times
• Hide combination list (Just submit it)
• Find a way to share the load
  • Generate in sets to the power of four?
  • Set a maxComb restriction

URL Characters are parsed into html codes when submitting but are not changed back when brute-forcing.

Currently the script will only function with a one field form.

• Need to add support for a username/email/name field for login forms.