Skip to main content

Brutality: A Fuzzer For Any GET Entries

Brutalitys' Features
  • Multi-threading on demand.
  • Fuzzing, bruteforcing GET params.
  • Find admin panels.
  • Colored output.
  • Hide results by return code, word numbers.
  • Proxy support.
  • Big wordlist.
Screenshots:

Brutality's Installtion

How to use Brutality?

Examples:
   Use default wordlist with 5 threads (-t 5) and hide 404 messages (–e 404) to fuzz the given URL (http://192.168.1.1/FUZZ):
python brutality.py -u 'http://192.168.1.1/FUZZ' -t 5 -e 404

   Use common_pass.txt wordlist (-f ./wordlist/common_pass.txt), remove response with 6969 length (-r 6969) and proxy at 127.0.0.1:8080 (-p http://127.0.0.1:8080) to fuzz the given URL (http://192.168.1.1/brute.php?username=admin&password=FUZZ&submit=submit#):
python brutality.py -u 'http://192.168.1.1/brute.php?username=admin&password=FUZZ&submit=submit#' -f ./wordlist/common_pass.txt -r 6969 -p http://127.0.0.1:8080

ToDo List:
  • Smooth output.
  • Export file report.
  • Modularization.

Continue reading


Comments

Popular posts from this blog

鄭子璉 | 個人隨寫

https://tlcheng.wordpress.com/%e9%97%9c%e6%96%bc/ https://tlcheng.wordpress.com/%e8%87%aa%e7%94%b1%e7%95%99%e8%a8%80/ https://tlcheng.wordpress.com/ https://tlcheng.wordpress.com/page/2/ https://tlcheng.wordpress.com/2019/08/21/sql-server-%e8%b3%87%e6%96%99%e5%ba%ab%e6%90%8d%e6%af%80%e8%88%87%e4%bf%ae%e5%be%a9/ https://tlcheng.wordpress.com/author/tlcheng/ https://tlcheng.files.wordpress.com/2019/08/19133007_info_dbcc_825_01.png https://tlcheng.files.wordpress.com/2019/08/19134221_fail_dbcc_8646.png https://tlcheng.files.wordpress.com/2019/08/19140935_fail_dbcc_824.png https://tlcheng.files.wordpress.com/2019/08/19153642_info_dbcc_8957_01.png https://tlcheng.files.wordpress.com/2019/08/19160231_fail_lock_1204.png https://tlcheng.files.wordpress.com/2019/08/19160326_info_dbcc_825_02.png https://tlcheng.files.wordpress.com/2019/08/20232545_info_dbcc_8957_02.png https://tlcheng.files.wordpress.com/2019/08/20234545_info_dbcc_8957_03.png https://tlcheng.files.wordpress.com/2019/08/20235716_...

ත්රස්තවාදීන්ගේ අවසානය-දිවයින- 2008/10/03

kQlQ@n`c|cQy ngryt a`sn~n vW sQtQn yRq hmRq` @s~n`Ak It q#v#n~w pYh`r el~l krmQn~ ngry a`kYmNy kQrWmt sRq`nmQn~ sQtQwQ. kQlQ@n`c|cQy ngryt k`lwOvk~kO pYh`r el~l kQrWm a`rm|x krn qQny a$wk @n`vn bv yRq hmRq`pwQ lEwQnn~ @jnr`l~ srw~ @f`n~@s~k` psRgQyq` pYk`X k@L~y. e~ anRv kQlQ@n`c|cQy ngry aw~pw~kr g#nW@m| wWrN`w~mk avsn~ stn kQnm| @m`@h`wk @h`~ a#r@BnR a#w. yRq hmRq` @s~n`Ak @g`dbQmQn~ pYh`r el~l krmQn~ kQlQ@n`c|cQy @k`tQ bl@k`tRv a`kYmNy kQrWmt @n`nvwQn q#v#n~w @g`dbQm| pYh`r m`l`v a`rm|x kQrWmt sRq`nmQn~ sQtQyqW kQlQ@n`c|cQy pY@q~X@y~ @k`tQ k[vRr# @vw gOvn~ pYh`r @v|gvw~ kQrWmt gOvn~ hmRq`v pQyvr @gn a#w. psRgQy qQn kWpy wQs~@s~ gOvn~ hmRq` pYh`rk @jtQy`n` sh em|. ayQ. 24 pYh`rk @hlQ@k`p~tr\ y`n` mgQn~ gOvn~ pYh`r rFsk~ el~l krn lqW. pYx`krn...

5504 Interesting News

Imran Khan is convicted. Pakistan's generals are content Economic data, commodities and markets Xi Jinping is obsessed with political loyalty in the PLA Momentum against Joe Biden is mounting again Even China's own state media sometimes resent state control Southern Italy needs private enterprise and infrastructure Oil bosses have big hopes for the AI boom Nvidia Probed in China Over Possible Antimonopoly Violations A trove of photographs casts light on Bangladesh's liberation war Business Some Australians are increasingly sceptical of AUKUS KAL's cartoon Business Andrés Manuel López Obrador puts his stamp on Mexico's schools Beyond France, the European elections will deliver more of the same Why New York scrapped congestion charging What Israel's killing of aid workers means for Gaza How to pay for the poor world to go green China will become less populous, more productive—and more pricey Economic data, commodities and markets Japan lands on the Moon England...