| Brutus is a free, brute-force cracking program. An automated method of figuring out passwords, brute-force cracking throws every possible combination of words, letters, numbers, and symbols at a website in the hopes that one of the combinations is correct. It takes a while, but it gets the job done.
As usual, hacking a website that is not yours is a crime and can get you in some trouble, but here's how to test out your site's security using Brutus.
Copy-and-paste your target URL into the "target" box.
Choose your desired method of attack. "HTTP Basic Auth" is the most common.
Choose your authentication option. Here you choose to use a word list or a random character generator. For testing your own site I suggest word list, but if you want to see how long it takes to brute force it, check the box next to "Single User" enter admin into the User ID box and set pass mode to "Brute Force."
Press start. If you choose brute force using a single user, I suggest you go watch a "Twilight Zone" marathon. If you choose to brute force to find both the user name and password, watch the marathon a few more times, this could take a while.
When it's done running, the usernames and passwords that worked will appear in the Positive Authentication Results box, now wasn't that easy? |