badtouch

Allows writing custom `verify(user, password)` functions in Lua to test any authentication mechanism, as demonstrated in the example script for web logins with CSRF tokens.

The runtime automatically handles parallel execution, progress tracking, and result aggregation, freeing users from managing threads or queues manually.

Includes HTTP sessions, form handling, CSRF parsing, JSON, and raw socket communication, evidenced by functions like `http_mksession`, `html_select`, and `sock_connect`.

Provides direct functions for MySQL and LDAP authentication testing, such as `mysql_connect` and `ldap_bind`, reducing the need for external tools.

Offers `print()` and `oneshot` mode for script development, making it easier to troubleshoot authentication logic during testing.