[MefedronMilfs]

I need help how to setup BurpSuite or any other tool to bruteforcing only one login form, maybe someone know what is the best way to do this. I dont know how setup it, login site is very simple but i dont know what i have to do, any tips?

[compalabee]

I need help how to setup BurpSuite or any other tool to bruteforcing only one login form, maybe someone know what is the best way to do this. I dont know how setup it, login site is very simple but i dont know what i have to do, any tips?

Have you tried it over Intruder?

Step-by-step
1. Copy the crafted request into Intruder
2. Insert the markers
3. Prepare a wordlist and feed it into Burp
4. Run Intruder

In Burp, there's a plugin called Turbo Intruder that speeds things up considerably, but setup a little more complicated.

The crafted request should be a little similar to this (Sorry, no Burp right now, I'm on my phone)

PHP Code


<?php 
POST /login HTTP/1.1
Host: www.targetdomain.com
User-agent: Mozilla/5.0 Firefox/72.0
Accept: */*
Content-Length: 1

username=$&password=$ 


Note the $ markers. Not sure the char that Intruder uses though.

[MefedronMilfs]

Have you tried it over Intruder?

Step-by-step
1. Copy the crafted request into Intruder
2. Insert the markers
3. Prepare a wordlist and feed it into Burp
4. Run Intruder

In Burp, there's a plugin called Turbo Intruder that speeds things up considerably, but setup a little more complicated.

The crafted request should be a little similar to this (Sorry, no Burp right now, I'm on my phone)

PHP Code


<?php 
POST /login HTTP/1.1
Host: www.targetdomain.com
User-agent: Mozilla/5.0 Firefox/72.0
Accept: */*
Content-Length: 1

username=$&password=$ 


Note the $ markers. Not sure the char that Intruder uses though.

Thank your for response and i will try, i think with your example its easy for now