Brute Force Login in a web site with Python, hack accounts on any website with a good dictionary of words. NOTE: AM NOT RESPONSIBLE OF BAD USE OF THIS PROJECT, it's only for searching purposes and learning environment!
Just hit this command to install python packages:
pip install -r requierements.txt
BFL is a robot that tries to connect by exploiting the library of passwords that it has in its possession and do not stop to submit the form until it has correspondence, so you can edit the dictionary file. tx by adding your own words for a particular target!
# The link of the website
url = 'https://www.example.com/login.php'
# The userfield in the form of the login
userField = 'email'
# The passwordfield in the form
passwordField = 'pass'
#...
#That's it, all your configurations is done
cd C:/path/to/Brute-Force-Login
python main.py
The target is present at /target repository, when you run it, you will have this:
if you don't want to deploy the target locally or doesn't have PHP install localy, you can use this link to set an attack :
- Target LINK (Where you can test your attacks)
- Username : sanix
- Password : .bleach1234
- PS: on the password, don't forget the "." before b of bleach
When you launch BFL.py, this is a user case!
i created a password generator for this project named Genesis, that can generate multiple combination of passwords base on Key Word the victims could use, Have a look there ;-)