Tool 131: Brute force http client (site password)

Description:

  This tool successively tries couples of login and passwords in order
  to find matching authentication credentials.
  This tool tries to find password of web server (basic authentication).
  
  Parameter --uri is the uri/url requested.
  Parameters --proxy-ip, --proxy-port, --proxy-login and
  --proxy-password defines the web proxy and credentials.
  Parameter --user-agent defines the client name to send. For example
  'Mozilla/5.0'.
  Parameter --login defines the logins to try. To check several logins,
  parameter --login-file is the file containing logins (one per line).
  Parameter --password-file is the file containing passwords (1/line).
  Parameter --stopatfirst indicates to stop when first match is found.
  Parameter --numthread defines the number of threads (simultaneous
  running checks) to use.
  Parameter --dst-ip is the address of remote host/server.
  Parameter --dst-port is the port number where to connect.
  Optional parameter --src-ip defines the local IP address to use.
  Optional parameter --src-port defines the local port number to use.
  Optional parameter --ip4opts permits to add IP4 options encoded as
  mixed.
  Optional parameter --ip6exts permits to add IP6 options encoded as
  mixed (first byte is the next header number).
  Optional parameters --device, --src-eth and --dst-eth permits to
  create a virtual client using fake addresses (in this case, tool have
  to be run with admin privilege in order to sniff and spoof at
  Ethernet level).

Synonyms:

web

Usage:

netwox 131 -u uri [-L login] -w file [-p ip] [-P port] [-g login] [-o password] [-U useragent] [-l file] [-T uint32] [-s|+s] [-n uint32] [-v|+v]

Parameters:

parameter	description	example
`-u\|--uri uri`	url/uri to download	http://server/private/
`-L\|--login login`	login
`-w\|--password-file file`	password file	passwordfile.txt
`-p\|--proxy-ip ip`	IP address of proxy	5.6.7.8
`-P\|--proxy-port port`	port of proxy	3128
`-g\|--proxy-login login`	login of proxy
`-o\|--proxy-password password`	password of proxy
`-U\|--user-agent useragent`	user agent	Mozilla/5.0
`-l\|--login-file file`	login file	loginfile.txt
`-T\|--timeout uint32`	timeout in milliseconds	60000
`-s\|--stopatfirst\|+s\|--no-stopatfirst`	stop at first valid login found
`-n\|--numthread uint32`	number of threads to launch	5
`-v\|--verbose\|+v\|--no-verbose`	be verbose	This boolean is set. Use + or --no- to unset it.

Examples:

netwox 131 -u "http://server/private/" -w "passwordfile.txt"

netwox 131 --uri "http://server/private/" --password-file "passwordfile.txt"