Brutemap is an open source penetration testing tool that automates testing accounts to the site's login page, based on Dictionary Attack. With this, you no longer need to search for other bruteforce tools and you also no longer need to ask CMS What is this? only to find parameter forms, because brutemap will do it automatically. Brutemap is also equipped with an attack method that makes it easy for you to do account checking or test forms with the SQL injection bypass authentication technique.
Installation
Brutemap uses selenium to interact with the website. So, you need to install Web Driver for selenium first. See here. If you have installed the
git package, you only need to clone the repository Git. Like this:$ git clone https://github.com/brutemap-dev/brutemap.git$ pip install -r requirements.txtUsage
For basic use:
$ python brutemap.py -t http://www.example.com/admin/login.php -u admin -p default$ python brutemap.py -hVideo
Links
- Homepage: https://brutemap-dev.github.io
- Download: .zip (latest version) atau .tar.gz (latest version).
- Issue tracker: https://github.com/brutemap-dev/brutemap/issues
- User's manual: https://github.com/brutemap-dev/brutemap/wiki