Looking for a special kind of Bruteforce tool.
I have been running into this issue more and more lately during pentests.
What say the hivemind, is there something out there I could be using to make my pentests more efficient?
Re: Looking for a special kind of Bruteforce tool.
I am not rly sure, what do u mean with "mangles login credentials", but for a long time i use win32 app called Brutus, because back in the days, THC-Hydra didnt know a lot methods to work with and i am not rly sure if they updated it -> for web interface Brutus provides: HTTP-GET, HTTP-PUT, HTTP-HEAD for HTTP(Basic Auth); HTTP-GET and HTTP-PUT for HTTP (Form) and of course there is simple way to define own sequence (meaning your own authentication phase and Response phase). i just used that toll this day again and it still works as expected.
Originally Posted by crankenstein