{"id":26398480,"url":"https://github.com/flashnuke/httpbrute","last_synced_at":"2025-10-07T01:51:44.526Z","repository":{"id":64662774,"uuid":"576403428","full_name":"flashnuke/httpbrute","owner":"flashnuke","description":"A tool for brute-forcing HTTP authentication (for CTFs and pentesting)","archived":false,"fork":false,"pushed_at":"2022-12-20T00:56:26.000Z","size":74,"stargazers_count":11,"open_issues_count":0,"forks_count":0,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-08-07T14:48:59.569Z","etag":null,"topics":["bruteforce","ctf","pentesting"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/flashnuke.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2022-12-09T19:11:35.000Z","updated_at":"2025-06-12T21:06:58.000Z","dependencies_parsed_at":"2023-01-29T23:15:54.948Z","dependency_job_id":null,"html_url":"https://github.com/flashnuke/httpbrute","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/flashnuke/httpbrute","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/flashnuke%2Fhttpbrute","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/flashnuke%2Fhttpbrute/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/flashnuke%2Fhttpbrute/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/flashnuke%2Fhttpbrute/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/flashnuke","download_url":"https://codeload.github.com/flashnuke/httpbrute/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/flashnuke%2Fhttpbrute/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278708030,"owners_count":26031932,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-06T02:00:05.630Z","response_time":65,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["bruteforce","ctf","pentesting"],"created_at":"2025-03-17T12:30:53.992Z","updated_at":"2025-10-07T01:51:44.482Z","avatar_url":"https://github.com/flashnuke.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"![image](https://user-images.githubusercontent.com/59119926/207055888-c8cc35d6-0f2a-4bd2-a8db-256287488649.png)\n\nCrack HTTP authentication by brute-force\n\nTypes of authentication currently supported:\n* Basic Auth\n* Digest Auth\n\n\n# Requirements\nWorks on every OS. \u003c/br\u003e\nRegarding 3rd party libraries, only `requests` is required and could be installed by running the following command from the project's directory:\n\u003e pip3 install -r requirements.txt\n\n# Usage\nThe basic usage where one username is tested against a list of passwords is very straightforward\n```bash\n./httpbrute \u003ctaret_url\u003e -u \u003cusername\u003e -P \u003cpath_to_passlist\u003e\n```\n\n### Notes\n* Brute-forcing multiple users is possible by passing `-U \u003cpath_to_userlist\u003e` instead of `-u \u003cusername\u003e`\n* It is possible to test a single password by passing `-p \u003cpassword\u003e` instead of `-P \u003cpath_to_passlist\u003e`\u003c/br\u003e\n(useful for cases where only the username is known)\n### Optional params\n| param | description | default |\n|---|---|---|\n| -s, --sleep | sleep between requests (each worker individually) | 0[s] |\n| -t, --timeout | request timeout in seconds | 10[s] |\n| -w. --workers | amount of workers (running threads) | 16 |\n\n# Disclaimer\n\nThis tool is only for testing and can only be used where strict consent has been given. Do not use it for illegal purposes! It is the end user’s responsibility to obey all applicable local, state and federal laws. I assume no liability and am not responsible for any misuse or damage caused by this tool and software.\n\nDistributed under the GNU License.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fflashnuke%2Fhttpbrute","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fflashnuke%2Fhttpbrute","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fflashnuke%2Fhttpbrute/lists"}