Open In App

Blazy – Open Source Modern Login Brute-forcer

Last Updated : 08 Jun, 2022
Improve
Improve
Like Article
Like
Save
Share
Report

Brute-Forcing is the most lengthy password cracking process, but the Blazy tool is not just a brute-force tool, it can also check for CSRF (Cross-Site Request Forgery), Clickjacking, Cloudflare hosts, and even for WAF Vulnerabilities in the target application. Blazy tool is a multi-threading tool and consists of a good error detection system. Blazy tool is an automated tool that is automated using Python Language and its cross-platform tool, it can work with Windows, Linux, and also Mac OS. Blazy tool is also available on the GitHub platform for free.

Note: Make Sure You have Python Installed on your System, as this is a python-based tool. Click to check the Installation process: Python Installation Steps on Linux

Installation of Blazy Tool on Kali Linux OS

Step 1: Use the following command to install the tool in your Kali Linux operating system.

git clone https://github.com/s0md3v/Blazy

Step 2: Now use the following command to move into the directory of the tool. You have to move in the directory in order to run the tool.

cd Blazy

Step 3: You are in the directory of the Blazy. Now you have to install a dependency of the Blazy using the following command.

sudo pip3 install -r requirements.txt

Step 4: All the dependencies have been installed in your Kali Linux operating system. Now use the following command to run the tool and check the help section.

python3 blazy.py

Working with Blazy Tool on Kali Linux OS

Example/Usage: Brute-Forcing target domain

Target URL: http://testphp.vulnweb.com/login.php

We have given the target URL as the input to the tool. The tool has also detected the Clickjacking Vulnerability and also CSRF Vulnerability on the target URL. We can find the exploit and try to gain access to the target domain by exploiting the detected flaws.

The tool has also got the credentials for the login page by using the Brute-Force approach. We can also manually add the possible word into the word lists if the target domain has a vast scope.


Like Article
Suggest improvement
Previous
Next
Share your thoughts in the comments

Similar Reads