A GUI based python tool for Brute Force login in a web page. Hack accounts on any website with a good dictionary of words. It can also brute force CSRF Token.

Made In Python(3.9.10)

1. Brute Force Any Web Page Login.
2. Brute Force CSRF Token.

1. Simple & Clean UI.
2. Automated Mode (Scrap HTML Tags Automatically).
3. Manual Mode (User need to provide HTML Tags Manually).
4. You Can Adjust Thread Numbers.
5. All the Successful BruteForce Credentials will be Stored in Database to View Letter from History Section.
6. Easy to Use.
7. user Friendly.

• validators
• requests
• pyglet
• lxml

• Clone Repository

https://github.com/Hrishikesh7665/WebPageLogin_BruteForce.git

• Or

• Download Repository

Direct Download Zip Click Here

For Linux

• Install Required Modules

pip3 install validators

pip3 install requests

pip3 install pyglet

pip3 install lxml

• Or

pip3 install -r requirements.txt

Single Line Command

https://github.com/Hrishikesh7665/WebPageLogin_BruteForce.git && pip3 install -r requirements.txt

• Run

python3 "webLogin_burteForce_gui.py"

N.B: If You Getting “No Module Tkinter” Error Try This:

sudo apt-get install python3-tk

For Windows

• Install Required Modules

pip install validators

pip install requests

pip install pyglet

pip install lxml

• Or

pip install -r requirements.txt

• Run

python "webLogin_burteForce_gui.py"

This tool tries to connect by exploiting the library of passwords that it has in its possession and do not stop to submit the form until it has correspondence, so you can edit the dictionary file txt by adding your own words for a particular target.

You can set your own LAB for testing this tool with XAMP by following this steps:

• Step 1

Install XAMP

• Step 2

Download This PHP Webpage click here for download

• Step 3

Create a new folder with the name 'LoginPage' in 'C:\xampp\htdocs'

• Step 4

Copy the 'loginpage.php' file into the 'C:\xampp\htdocs\LoginPage'

• Step 5

Visit '127.0.0.1/LoginPage/loginpage.php'

• Step 6

Now your test lab is ready. Happy Hacking.

If you don't want to deploy the target locally or doesn't have PHP install locally, you can use this link to set an attack :

• Target LINK (Where you can test your attacks)

• crackstation
• insidepro
• skullsecurity
• danielmiessler
• berzerk0
• topics/password-cracking

• Warning Your Anti-Virus Software Maybe Detect This Script As Virus. If You Concern About This, Please Check Virus Total Report Before Using This Script. Click Here To Check Virus Total Result.

• Warning It Is End User's Responsibility to Obey All the Applicable Laws.

Peace ✌️