miércoles, 3 de junio de 2020

Brutality: A Fuzzer For Any GET Entries

Brutalitys' Features
  • Multi-threading on demand.
  • Fuzzing, bruteforcing GET params.
  • Find admin panels.
  • Colored output.
  • Hide results by return code, word numbers.
  • Proxy support.
  • Big wordlist.
Screenshots:

Brutality's Installtion

How to use Brutality?

Examples:
   Use default wordlist with 5 threads (-t 5) and hide 404 messages (–e 404) to fuzz the given URL (http://192.168.1.1/FUZZ):
python brutality.py -u 'http://192.168.1.1/FUZZ' -t 5 -e 404

   Use common_pass.txt wordlist (-f ./wordlist/common_pass.txt), remove response with 6969 length (-r 6969) and proxy at 127.0.0.1:8080 (-p http://127.0.0.1:8080) to fuzz the given URL (http://192.168.1.1/brute.php?username=admin&password=FUZZ&submit=submit#):
python brutality.py -u 'http://192.168.1.1/brute.php?username=admin&password=FUZZ&submit=submit#' -f ./wordlist/common_pass.txt -r 6969 -p http://127.0.0.1:8080

ToDo List:
  • Smooth output.
  • Export file report.
  • Modularization.

Continue reading


  1. Is Hacking Illegal
  2. Pentest News
  3. Pentesterlab
  4. Hacking 3Ds
  5. Pentest Plus
  6. Pentest Plus
  7. Pentest Dns
  8. Hacking The System
  9. Pentest Framework
  10. How To Pentest A Website
  11. Hacking Meaning
  12. Hacking Health
  13. Pentest Reporting Tool
  14. Pentest Box
  15. Hacker0Ne
  16. Pentest Free
  17. Pentest Xss

No hay comentarios:

Publicar un comentario