This is a Go library which main purpose is giving an interface to loop over a dictionary and use those words/lines as input for some custom logic such as HTTP file bruteforcing, DNS bruteforcing, etc. Brute-Machine will take care of parallelism, job dispatching and so on, allowing you to focus on what matters most, the actual logic of your software.
The following is an example of how to use brutemachine to perform HTTP files bruteforcing.
package main
import (
"fmt"
"net/http"
"strings"
"github.com/evilsocket/brutemachine"
)
const base = "http://some-url.com/"
func DoRequest(page string) interface{} {
url := strings.Replace(fmt.Sprintf("%s%s", base, page), "%EXT%", "php", -1)
resp, err := http.Head(url)
// Only pass valid responses to the handler.
if err == nil && resp.StatusCode == 200 {
return url
}
return nil
}
func OnResult(res interface{}) {
fmt.Printf("@ Found '%s'\n", res)
}
func main() {
m := brutemachine.New( -1, "dictionary.txt", DoRequest, OnResult)
if err := m.Start(); err != nil {
panic(err)
}
m.Wait()
fmt.Printf("\nDONE:\n")
fmt.Printf("%+v\n", m.Stats)
}go get github.com/evilsocket/brutemachine
This project is copyleft of Simone Margaritelli and released under the GPL 3 license.
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent