Skip to content

README.md

Latest commit

 

History

History
81 lines (63 loc) · 2.15 KB

README.md

File metadata and controls

81 lines (63 loc) · 2.15 KB

BasicAuthBruteForcer

Http Auth BruteForcer Tool Written in GoLang Supports both Basic and Digest authentication types

simple and fast http auth bruteforce

✨ Features

  • Ultra-fast: Harnesses Go’s concurrency to brute force credentials with 50 threads by default (customizable).
  • Supports Both Auth Types: Brute force HTTP Basic and HTTP Digest authentication.
  • Flexible Input: Test single credentials or entire wordlists for users and passwords.
  • Timeout Control: Tweak HTTP connection timeouts for slow or unreliable networks. Colorful, Clear Output: Easy-to-read status, success, and failure messages.
  • Open Source: MIT licensed and ready for your improvements.

🛠 Install

go install github.com/itssherwin/BasicAuthBruteForcer@latest

🚦 Usage

$ BasicAuthBruteForcer
        -user string.
                 One User to test.
        -passwd string.
                 One Password to test.
        -user-file FILE.
                 List of users.
        -passwd-file FILE.
                 List of passwords.
        -timeout int.
                 HTTP Connection timeout. Default: 10s
        -auth-type string.
                 Authentication type: basic or digest. Default: basic
        -threads int.
                 Number of concurrent threads (goroutines). Default: 50

Examples

Brute force Digest Auth with custom timeout and 100 threads: :

$ BasicAuthBruteForcer -url http://target -user-file users.txt -passwd-file passwords.txt -auth-type digest -timeout 30 -threads 100

Password spray:

$ BasicAuthBruteForcer -url https://target/protected -user-file users.txt -passwd 'Def@ultPassw0rd'

📦 Default wordlists are included in the wordlists/ directory:

  • wordlists/users.txt
  • wordlists/passwords.txt

Feel free to use your own!

📝 License

This project is licensed under the MIT. Contributions, issues, and feature requests are welcome! 🚀

Support 💎

Thanks for your support!

  • Bitcoin
bc1qq6vrlnytva67mj956nydfyvuzwl4t6wy2naahc
  • Ethereum
0xa88238491Df0219b0F924Fc6c6e1Bc8B3BB50E60
  • USDT (trc20)
TDxoEoBLnStz6QBY69rUnsnkAxuoE485Xy