Tool 131: Brute force http client (site password)


  This tool successively tries couples of login and passwords in order
  to find matching authentication credentials.
  This tool tries to find password of web server (basic authentication).
  Parameter --uri is the uri/url requested.
  Parameters --proxy-ip, --proxy-port, --proxy-login and
  --proxy-password defines the web proxy and credentials.
  Parameter --user-agent defines the client name to send. For example
  Parameter --login defines the logins to try. To check several logins,
  parameter --login-file is the file containing logins (one per line).
  Parameter --password-file is the file containing passwords (1/line).
  Parameter --stopatfirst indicates to stop when first match is found.
  Parameter --numthread defines the number of threads (simultaneous
  running checks) to use.
  Parameter --dst-ip is the address of remote host/server.
  Parameter --dst-port is the port number where to connect.
  Optional parameter --src-ip defines the local IP address to use.
  Optional parameter --src-port defines the local port number to use.
  Optional parameter --ip4opts permits to add IPv4 options encoded as
  Optional parameter --ip6exts permits to add IPv6 options encoded as
  mixed (first byte is the next header number).
  Optional parameters --device, --src-eth and --dst-eth permits to
  create a virtual client using fake addresses.


  netwox 131 -u uri [-L data] -w file [-p ip] [-P port] [-g data] [-o password] [-U data] [-l file] [-T uint32] [-s|+s] [-n uint32] [-v|+v]


parameter description example
-u|--uri uri url/uri to download http://server/private/
-L|--login data login  
-w|--password-file file password file passwordfile.txt
-p|--proxy-ip ip IP address of proxy
-P|--proxy-port port port of proxy 3128
-g|--proxy-login data login of proxy  
-o|--proxy-password password password of proxy  
-U|--user-agent data user agent  
-l|--login-file file login file loginfile.txt
-T|--timeout uint32 timeout in milliseconds 60000
-s|--stopatfirst|+s|--no-stopatfirst stop at first valid login found  
-n|--numthread uint32 number of threads to launch 5
-v|--verbose|+v|--no-verbose be verbose This boolean is set.
Use + or --no- to unset it.


  netwox 131 -u "http://server/private/" -w "passwordfile.txt"

  netwox 131 --uri "http://server/private/" --password-file "passwordfile.txt"