A fast, concurrent brute force tool for FTP and Web lopgin boxes (Auth boxes from webserrvers) written in Go.
- Concurrent password attacks
- Rate limiting per target
- FTP and web login support
- Colorized output with verbose logging
- Automatic updates
- Progress tracking and statistics
go install github.com/fernstedt/brutus@latest
Or clone manually:
git clone https://github.com/fernstedt/brutus.git
cd brutus
go install
-ftp
: Target FTP server (IP:port)-web
: Target web login URL-username
: Username for login attempts-wordlist
: Path to password list-threads
: Concurrent threads (default: 10)-rate
: Rate limit per second (default: 20)-verbose
: Enable detailed output
FTP:
brutus -ftp 192.168.1.100:21 -username admin -wordlist passwords.txt
Web:
brutus -web http://example.com/login/ -username admin -wordlist passwords.txt -rate 10
- Successful logins:
successful_logins.txt
- Debug logs:
app.log
- Real-time statistics on completion
brutus update