https://github.com/dadevel/bruteproxy

Automated brute forcing of web logins
https://github.com/dadevel/bruteproxy

offsec password-attacks

Last synced: 3 days ago
JSON representation

Automated brute forcing of web logins

• Host: GitHub
• URL: https://github.com/dadevel/bruteproxy
• Owner: dadevel
• Created: 2023-11-09T21:02:32.000Z (about 1 year ago)
• Default Branch: main
• Last Pushed: 2023-11-09T21:44:37.000Z (about 1 year ago)
• Last Synced: 2024-05-04T00:10:27.659Z (7 months ago)
• Topics: offsec, password-attacks
• Language: Python
• Homepage:
• Size: 29.3 KB
• Stars: 1
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# bruteproxy

During internal pentests you often encounter a myriad of login portals with potentially weak passwords.

This repo contains a few scripts to automate password brute forcing with [mitmproxy](https://github.com/mitmproxy/mitmproxy/) and [ffuf](https://github.com/ffuf/ffuf)

> **Warning:** This is just a proof of concept and may be unstable 🚧

# Setup & Usage

Clone the repository.

~~~ bash

git clone --depth 1 https://github.com/dadevel/bruteproxy.git

cd ./bruteproxy

poetry install

~~~

Start the HTTP proxy.

~~~ bash

poetry run mitmdump -s ./proxy.py --no-rawtcp --no-http2 --ssl-insecure --listen-host 127.0.0.1 --listen-port 8080

~~~

Configure `http://127.0.0.1:8080` as proxy in your browser.

Submit a specific username or the string `FUZZUSER` and the password `FUZZPASS` on every login portal you encounter.

The proxy will recognize this requests and dump them into the `./logins` folder.

Generate ffuf commands for the collected requests with [ffufgen.sh](./ffufgen.sh).

~~~ bash

./ffufgen.sh -c -w ./common-usernames.txt:FUZZUSER -w ./common-usernames.txt:FUZZPASS -mode pitchfork -ac

./ffufgen.sh -c -w ./common-usernames.txt:FUZZUSER -w ./common-passwords.txt:FUZZPASS -mode clusterbomb -ac

~~~

Or build the commands manually.

~~~ bash

ffuf -request ./logins/https-example.com-443.req.txt -request-proto https -of csv -o ./logins/https-example.com-443.ffuf.csv -c -w ./common-usernames.txt:FUZZUSER -w ./common-passwords.txt:FUZZPASS -ac

~~~