Authforce is an HTTP authentication brute forcer. Using various methods, it attempts brute force username and password pairs for a site. It has the ability to try common usernames and passwords, username derivations, and common username/password pairs. It is used both to test the security of your site and to highlight the insecurity of HTTP authentication due to the fact that users just don't pick good passwords.
| Tags | Internet Web Security |
|---|---|
| Licenses | GPL |
| Operating Systems | POSIX Linux |
| Implementation | C |
Recent releases


Changes: This release fixes a bug triggered by using --username-file with an absolute path. It also brings the autoconf setup up to date.


Changes: This release fixes some minor bugs and improves SSL support.


Changes: A fix for a major bug that would cause authforce to crash on large datafiles.


Changes: This release includes internationalisation support, authconf/automake support, and some fixes for compiling on various distributions.


Changes: This release features fixed and improved session support, the replacement of SIGUSR1 with SIGINT (control-c), almost total memory leak annihilation, and many bugfixes.