brutespray
A fast, multi-protocol credential brute-forcer that parses Nmap, Nessus, and Nexpose output to test credentials across 30+ services.
What is brutespray?
Brutespray is a command-line security tool written in Go that automates credential brute-forcing across network services. It parses output from scanners like Nmap, Nessus, and Nexpose to automatically test default and custom usernames and passwords on over 30 protocols, helping security professionals identify weak credentials during penetration tests.
Security researchers, penetration testers, and red teamers who need to efficiently test for weak credentials across a large number of services discovered during network reconnaissance.
Developers choose Brutespray for its speed, parallel processing, and direct integration with popular scanning tools, which eliminates manual data conversion. Its interactive TUI, embedded wordlists, and resume capabilities provide a robust and user-friendly experience for sustained brute-forcing engagements.
Overview
Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.
Use Cases
Best For
- Automating credential testing after an Nmap scan in a penetration test
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
