HTTPBrute - puzzlepeaches/CredMaster GitHub Wiki

Plugin Overview

This module allows for HTTP Basic, Digest, and NTLM authentication brute-forcing.

Unique Command Line Options

This module adds two new plugin args: --url and --auth. The HTTP auth flag sets the method of authentication basic, digest and ntlm.

Usage Notes

Throttle settings depend on a per-application basis. Use at your own discretion.

Example Command

credmaster.py <usual arguments> -m HTTPBrute --url https://example.com/endpoint/to/test --auth basic/digest/ntlm