A Brutality is a fuzzer for any GET entries and following are the features ;
- Multi-threading on demand
- Fuzzing, bruteforcing GET params
- Find admin panels
- Colored output
- Hide results by return code, word numbers
- Proxy support
- Big wordlist
Also Read – IP Finder CLI : The Official Command Line Client For IPFinder
Usages
- Install
git clone https://github.com/ManhNho/brutality.git
chmod 755 -R brutality/
cd brutality/
pip install -r requirements.txt
- Helps
python brutality -h
Examples
- Use default wordlist with 5 threads (-t 5) and hide 404 messages (–e 404) to fuzz the given URL (http://192.168.1.1/FUZZ):
python brutality.py -u ‘http://192.168.1.1/FUZZ’ -t 5 -e 404
- Use common_pass.txt wordlist (-f ./wordlist/common_pass.txt), remove response with 6969 length (-r 6969) and proxy at 127.0.0.1:8080 (-p http://127.0.0.1:8080) to fuzz the given URL (http://192.168.1.1/brute.php?username=admin&password=FUZZ&submit=submit#):
python brutality.py -u ‘http://192.168.1.1/brute.php?username=admin&password=FUZZ&submit=submit#’ -f ./wordlist/common_pass.txt -r 6
Demo
