Брут страницы аунтефикации

[Dragiss]

Появилась потребность сбрутить страницу входа в веб-приложение. Но при подборе пароля более 10-15 раз с одного ip начинает фродить.
Есть ли софт по типу гидры, куда можно закинуть проксилист?

Имеется ввиду что бы софт продолжал перебирать работая на одной прокси до получения фрода, далее переключился на следующую.

Если возможно составить такую команду, пожалуйста подскажите мне её. За ранее спасибо!

 

[Dota2]

There was a need to bruteforce the login page of a web application. But when trying to guess the password more than 10-15 times from one IP, it starts to fraud.
Is there any software like Hydra where I can upload a proxylist?

i can code one that work with proxylist or rotated proxy server , but i think hydra/medusa both can run throw proxy list and have the options also you can use them with proxychains

 

[Dragiss]

i can code one that work with proxylist or rotated proxy server , but i think hydra/medusa both can run throw proxy list and have the options also you can use them with proxychains

I need hydra to change the ip on frod.

 

[Dota2]

I need hydra to change the ip on frod.

if you on linux install proxychains , then configure it to load your proxy list from /etc/proxychains.conf

for example it should look

socks5 ip port
https ip port

or
you can use Medusa it support using proxylist or
i can write you tool fast and effective specially for your task

 

[dunkel]

на openbullet скрипт накидать можно за минуту

 

[Dragiss]

на openbullet скрипт накидать можно за минуту

Ты про этот?

GitHub - openbullet/OpenBullet2: OpenBullet reinvented

OpenBullet reinvented. Contribute to openbullet/OpenBullet2 development by creating an account on GitHub.

github.com

 

[dunkel]

Ты про этот?

GitHub - openbullet/OpenBullet2: OpenBullet reinvented

OpenBullet reinvented. Contribute to openbullet/OpenBullet2 development by creating an account on GitHub.

github.com

da

 

[m43stro]

Proxies are good of course, but another method which is often forgotten is a good old botnet model, where a server/C2 distributes randomized combos to each clients/bots, and waits for results before sending more. Of course, this would require custom development, but it's a good solution.