Python directory buster, multiple threads, gobuster-like CLI, web server brute-forcer, URL replace pattern feature.

Last update: Jan 05, 2022

Overview

pybuster v1.1

pybuster is a tool that is used to brute-force URLs of web servers.

Features

Directory busting (URI)
URL replace patterns (put PYBUSTER in URL for it to get replaced with current word)
Multiple threads
Clean data outputting
Custom success status code selection
Custom wordlist selection

Command Line Usage

usage: pybuster.py mode [-h] --wordlist WORDLIST --threads THREADS --url URL [--success SUCCESS]

positional arguments:
  mode                 Mode to run pybuster [dir,subdomain]

optional arguments:
  -h, --help           show this help message and exit
  --wordlist WORDLIST  Full path to wordlist
  --threads THREADS    Number of threads to use
  --url URL            URL to check
  --success SUCCESS    Success status codes, split by comma [optional]

Why should i use this over gobuster?

The gobuster tool might be overall quicker, and it might be better in other fields, but;

This tool runs on python3, which is pre-installed on most systems
It uses pip3 for modules, and it only requires one, requests, which is already installed in most systems
It is easier to understand python code over go code, when you aren't a programmer, thus you can easily edit this.
Faster setup, you dont need to install golang, you can start it directly.

Changes in v1.1

Features below, +;

Added subdomain search mode
Changed cli usage, changed "dns" to "subdomain"
Use python3 pybuster.py subdomain to start to scan for subdomains
The url shall not change, do not try to do https://PYBUSTER.url.com, this will break the tool, it will automatically do that, just write out the URL normally, like; https://url.com.
Minor changes to outputting

Changes in v1.0

First stable release, with main features, +:

Clean outputting
Easy exiting out of threads
Cleaner display of found URLs/URIs
Time formatting better, still need to modify a small thing, when time is 1am, 5 minutes, it will show 1:5, but it should show 01:05.
Mode still not changing anything, although you can use pattern to check for subdomains and other things
Slightly modified src/script.py to make it less CPU intensive, so more threads can run.
Exiting only requires you to press enter
Cleaner exiting summary.

Changes in v0.1.0

Can select mode (still only dir mode is fully supported)
used python argparse module for cleaner commandline arguments
URL pattern to replace, you can put PYBUSTER in the URL, and it will replace it with the current wordlist item. Example: http://PYBUSTER.glaukio.com/ (do NOT put PYBUSTER in the end of the URL, for example; /PYBUSTER, it will start checking the URL like this; /wordlist_item/wordlist_item!)

Changes in v0.0.1

Added base files
Support for dir mode
Custom thread selection
CLI-like interface for displaying data while-running, no long outputs
On exit, show a summary of what happend
Pipe between threads
Stop on command
Custom wordlist selection
Custom sucess status selection

You might also like...

This is simple python FTP password craker. To crack FTP login using wordlist based brute force attack

5 Oct 8, 2022

A python script to decrypt media files encrypted using the Android application 'Decrypting 'LOCKED Secret Calculator Vault''. Will identify PIN / pattern.

3 Sep 26, 2022

zip-brute Zip File Password Cracking with Using Password List

Zip brute is a python script that cracks zip that are password protected using a wordlist dictionary.

13 Nov 3, 2022

Script for automatic dump and brute-force passwords using Volatility Framework

Volatility-auto-hashdump Script for automatic dump and brute-force passwords using Volatility Framework

11 Apr 11, 2022

Brute-forcing (or not!) deck builder for Pokemon Trading Card Game.

PokeBot Deck Builder Brute-forcing (or not!) deck builder for Pokemon Trading Card Game. Warning: intensely not optimized and spaghetti coded Credits

0 Jan 10, 2022

A (completely native) python3 wifi brute-force attack using the 100k most common passwords (2021)

wifi-bf [LINUX ONLY] A (completely native) python3 wifi brute-force attack using the 100k most common passwords (2021) This script is purely for educa

20 Nov 12, 2022

Dapunta Multi Brute Force Facebook - Crack Facebook With Login - Free

✭ DMBF CRACK Dibuat Dengan ❤️ Oleh Dapunta Author: - Dapunta Khurayra X ⇨ Fitur Login [✯] Login Token ⇨ Fitur Crack [✯] Crack Dari Teman, Public,

10 Oct 19, 2022

This program will brute force any Instagram account you send it its way given a list of proxies.

Instagram Bruter This program will brute force any Instagram account you send it its way given a list of proxies. NOTICE I'm no longer maintaining thi

1 Nov 15, 2021

Instagram brute force tool that uses tor as its proxy connections

Insta-crack This is a instagram brute force tool that uses tor as its proxy connections, keep in mind that you should not do anything illegal with thi

3 Jan 28, 2022

Releases(v1.1)

v1.1(Jan 4, 2022)
Changes in v1.1

Features below, +;

Added subdomain search mode

Changed cli usage, changed "dns" to "subdomain"

Use python3 pybuster.py subdomain to start to scan for subdomains

The url shall not change, do not try to do https://PYBUSTER.url.com, this will break the tool, it will automatically do that, just write out the URL normally, like; https://url.com.

Minor changes to outputting

Source code(tar.gz)
Source code(zip)
v1.0(Jan 4, 2022)
First stable release, with main features, +:

Clean outputting

Easy exiting out of threads

Cleaner display of found URLs/URIs

Time formatting better, still need to modify a small thing, when time is 1am, 5 minutes, it will show 1:5, but it should show 01:05.

Mode still not changing anything, although you can use pattern to check for subdomains and other things

Slightly modified src/script.py to make it less CPU intensive, so more threads can run.

Exiting only requires you to press enter

Cleaner exiting summary.

Source code(tar.gz)
Source code(zip)
v0.1.0(Jan 4, 2022)
New changes;

Can select mode (still only dir mode is fully supported)

used python argparse module for cleaner commandline arguments

URL pattern to replace, you can put PYBUSTER in the URL, and it will replace it with the current wordlist item. Example: http://PYBUSTER.glaukio.com/ (do NOT put PYBUSTER in the end of the URL, for example; /PYBUSTER, it will start checking the URL like this; /wordlist_item/wordlist_item!)

Source code(tar.gz)
Source code(zip)
v0.0.1(Jan 4, 2022)
FIrst pybuster release;

Changes in v0.0.1

Added base files

Support for dir mode

Custom thread selection

CLI-like interface for displaying data while-running, no long outputs

On exit, show a summary of what happend

Pipe between threads

Stop on command

Custom wordlist selection

Custom sucess status selection

Source code(tar.gz)
Source code(zip)

Owner

Glaukio

1128d463bad6bc935ea53cde84141a2165d4650606f2ec07cdb73b64032a2df0

GitHub Repository

Trustme: #1 quality TLS certs while you wait

trustme: #1 quality TLS certs while you wait You wrote a cool network client or server. It encrypts connections using TLS. Your test suite needs to ma

479 Dec 27, 2022

Tools Crack Fb Terbaru

12 Jan 06, 2022

Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.

CVE-2021-31166: HTTP Protocol Stack Remote Code Execution Vulnerability This is a proof of concept for CVE-2021-31166 ("HTTP Protocol Stack Remote Cod

820 Dec 18, 2022

adb - A tool that allows you to search for vulnerable android devices across the world and exploit them.

adb - An exploitation tool for android devices. A tool that allows you to search for vulnerable android devices across the world and exploit them. Fea

136 Jan 02, 2023

FBGen is simple facebook user based wordlist generator using Username/ID and cookie.

2 Jul 20, 2022

CTF framework and exploit development library

pwntools - CTF toolkit Pwntools is a CTF framework and exploit development library. Written in Python, it is designed for rapid prototyping and develo

9.8k Dec 31, 2022

PasswordManager is a command-line program that helps you manage your secret files like passwords

PasswordManager is a command-line program that helps you manage your secret files like passwords. It's very minimalistic and easy to use.

3 Dec 30, 2021

BuddyPress is an open source WordPress plugin to build a community site. In releases of BuddyPress from 5.0.0 before 7.2.1 it's possible for a non-privileged, regular user to obtain administrator rights by exploiting an issue in the REST API members endpoint. The vulnerability has been fixed in BuddyPress 7.2.1. Existing installations of the plugin should be updated to this version to mitigate the issue.

CVE-2021-21389 BuddyPress 7.2.1 - REST API Privilege Escalation to RCE PoC (Full) Affected version: 5.0.0 to 7.2.0 User requirement: Subscriber user

17 Nov 09, 2022

Python directory buster, multiple threads, gobuster-like CLI, web server brute-forcer, URL replace pattern feature.

Related tags

Overview

pybuster v1.1

Features

Command Line Usage

Why should i use this over gobuster?

Changes in v1.1

Changes in v1.0

Changes in v0.1.0

Changes in v0.0.1

You might also like...

This is simple python FTP password craker. To crack FTP login using wordlist based brute force attack

A python script to decrypt media files encrypted using the Android application 'Decrypting 'LOCKED Secret Calculator Vault''. Will identify PIN / pattern.

zip-brute Zip File Password Cracking with Using Password List

Script for automatic dump and brute-force passwords using Volatility Framework

Brute-forcing (or not!) deck builder for Pokemon Trading Card Game.

A (completely native) python3 wifi brute-force attack using the 100k most common passwords (2021)

Dapunta Multi Brute Force Facebook - Crack Facebook With Login - Free

This program will brute force any Instagram account you send it its way given a list of proxies.

Instagram brute force tool that uses tor as its proxy connections

Releases(v1.1)

v1.1(Jan 4, 2022)

Changes in v1.1

v1.0(Jan 4, 2022)

v0.1.0(Jan 4, 2022)

v0.0.1(Jan 4, 2022)

Changes in v0.0.1

Owner

Glaukio

Trustme: #1 quality TLS certs while you wait

Tools Crack Fb Terbaru

Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.

adb - A tool that allows you to search for vulnerable android devices across the world and exploit them.

FBGen is simple facebook user based wordlist generator using Username/ID and cookie.

CTF framework and exploit development library

PasswordManager is a command-line program that helps you manage your secret files like passwords

If you are worried about being found perhaps try taking cover under a blanket. Pure Python PowerShell Obfuscator

A tool used to obfuscate python scripts, bind obfuscated scripts to fixed machine or expire obfuscated scripts.

client attack remotely , this script was written for educational purposes only

Steal Files on a Windows Machine

Dark-Fb No Login 100% safe

On-demand scanning for container registries

This is a keylogger in python for Windows, Mac and Linux!

CVE-2021-22205& GitLab CE/EE RCE

CloakifyFactory & the Cloakify Toolset - Data Exfiltration & Infiltration In Plain Sight;

Sentinel-1 SAR time series analysis for OSINT use

A gui application used for network reconnaissance while pentesting

使用golang重写开源工具wafw00f