CSRFBrute

CSRF login brute-force tool - V 0.5.0 Dev

(It is recommended to prioritize the stable and streamlined version csrfbrute.py)

🚀 Features

• Dynamic CSRF Token refresh - Ensures accuracy on high-security targets
• Thread-safe session management - Supports high-concurrency operations, up to 100 threads
• Intelligent retry mechanism - Exponential backoff strategy, improving success rate
• Session recovery - Supports resumable transfers and Cookie recovery
• Performance monitoring - Real-time statistics and memory optimization
• Security auditing - Complete logging and data masking

🛠️ Technical Architecture

• Language: Python 3
• Architecture: Object-oriented design, modular structure
• Concurrency: ThreadPoolExecutor thread pool
• Configuration: YAML configuration file support
• Parsing: BeautifulSoup HTML parsing

📋 Use Cases

• Web application login security assessment
• Enterprise system security compliance checks
• Validation of CSRF protection mechanism effectiveness
• Red team exercises and penetration testing

⚡ Quick Start

python3 csrfbrute.py --form-url http://target.com/login \
                     --submit-url http://target.com/login \
                     --csrf _token \
                     --fail-string "Invalid credentials" \
                     --users users.txt \
                     --passwords passwords.txt \
                     --threads 10

🔒 Security Statement

This tool is intended only for authorized security testing and penetration testing. Users must ensure it is used within the scope of legal authorization; the author assumes no legal liability.

---

Version: 0.5.0 | Author: RedteamNotes