+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: (".) looking for one form bruteforcer setup (/showthread.php?tid=6051058)
(".) looking for one form bruteforcer setup - MefedronMilfs - Feb 19, 2020
I need help how to setup BurpSuite or any other tool to bruteforcing only one login form, maybe someone know what is the best way to do this. I dont know how setup it, login site is very simple but i dont know what i have to do, any tips?
RE: (".) looking for one form bruteforcer setup - compalabee - Feb 20, 2020
(Feb 19, 2020 07:45 PM)MefedronMilfs Wrote: I need help how to setup BurpSuite or any other tool to bruteforcing only one login form, maybe someone know what is the best way to do this. I dont know how setup it, login site is very simple but i dont know what i have to do, any tips?
Have you tried it over Intruder?
Step-by-step
1. Copy the crafted request into Intruder
2. Insert the markers
3. Prepare a wordlist and feed it into Burp
4. Run Intruder
In Burp, there's a plugin called Turbo Intruder that speeds things up considerably, but setup a little more complicated.
The crafted request should be a little similar to this (Sorry, no Burp right now, I'm on my phone)
PHP Code
<?php
POST /login HTTP/1.1
Host: www.targetdomain.com
User-agent: Mozilla/5.0 Firefox/72.0
Accept: */*
Content-Length: 1
username=$&password=$
Note the $ markers. Not sure the char that Intruder uses though.
RE: (".) looking for one form bruteforcer setup - MefedronMilfs - Feb 20, 2020
(Feb 20, 2020 06:16 PM)compalabee Wrote: Have you tried it over Intruder?
Step-by-step
1. Copy the crafted request into Intruder
2. Insert the markers
3. Prepare a wordlist and feed it into Burp
4. Run Intruder
In Burp, there's a plugin called Turbo Intruder that speeds things up considerably, but setup a little more complicated.
The crafted request should be a little similar to this (Sorry, no Burp right now, I'm on my phone)
PHP Code
<?php
POST /login HTTP/1.1
Host: www.targetdomain.com
User-agent: Mozilla/5.0 Firefox/72.0
Accept: */*
Content-Length: 1
username=$&password=$
Note the $ markers. Not sure the char that Intruder uses though.
Thank your for response and i will try, i think with your example its easy for now