BruteForceAI: New AI-powered Github tool

BruteForceAI is an innovative penetration testing tool that leverages Large Language Models (LLMs) to enhance the execution of brute-force attacks. Unlike traditional methods that require extensive manual setup, BruteForceAI automatically analyses HTML content to detect login form selectors, streamlining the attack preparation process. This tool is designed to simulate realistic human behaviour while conducting multi-threaded attacks, significantly improving the effectiveness and accuracy of security testing. The AI begins by identifying login fields on the target page, and once the selectors are mapped, it initiates a targeted attack. It supports both brute-force and password spray modes, incorporating small delays, random timing, and varied user-agent strings to minimise detection risks.

In addition to its attack capabilities, BruteForceAI offers robust features for managing results and alerts. Testers can receive real-time webhook notifications through popular platforms such as Discord, Slack, Teams, or Telegram. All activities are meticulously logged and stored in an SQLite database, providing security teams with a comprehensive record of their testing efforts. This tool is intended for responsible and ethical use, including authorised penetration testing, security research, and participation in bug bounty programs. BruteForceAI is available for free on GitHub, making it an accessible resource for security professionals.