HTTPBrute

Plugin Overview

This module allows for HTTP Basic, Digest, and NTLM authentication brute-forcing. This module has not been tested to the fullest, if there are bugs please submit an issue/PR.

Unique Command Line Options

This module adds two new plugin args: --url and --auth. The HTTP auth flag sets the method of authentication basic, digest and ntlm.

Throttle Notes

Throttle settings may depend on a per-application basis. Use at your own discretion.

Example Command

credmaster.py <usual arguments> -m HTTPBrute --url https://example.com/endpoint/to/test --auth basic/digest/ntlm