Skip to content

NexusBrute: A modular Node.js toolkit for ethical security testing. Features Smart Brute, API Fuzzer, Session Logger, and more ... Use responsibly! ๐ŸŒŒ

License

Notifications You must be signed in to change notification settings

PicoBaz/NexusBrute

Folders and files

NameName
Last commit message
Last commit date

Latest commit

ย 

History

63 Commits
ย 
ย 
ย 
ย 
ย 
ย 
ย 
ย 
ย 
ย 
ย 
ย 
ย 
ย 
ย 
ย 
ย 
ย 

Repository files navigation

โ•ญโ”€โ”€โ”€ NexusBrute v1.3 โ”€โ”€โ”€โ•ฎ

A Node.js tool for ethical security testing.
NexusBrute is designed for security professionals to perform controlled brute-force tests, generate secure passwords, and analyze API rate limits. Built for precision and compliance, it ensures safe and authorized use.

โ•พโ”€ Features

  • Smart Brute: Controlled login testing with rate-limiting.
  • Password Generator: Creates strong, customizable passwords.
  • Rate Limit Checker: Analyzes API request restrictions.
  • Proxy Rotator: Dynamic proxy switching for stealthy requests.
  • Wordlist Optimizer: Streamlines password lists by removing duplicates and sorting.
  • API Fuzzer: Tests APIs with varied inputs to uncover vulnerabilities.
  • SQL Injection: Tests forms for SQL injection vulnerabilities with pre-defined payloads.
  • Output: Exports results in JSON and CSV formats.
  • Compliance: Engineered for ethical, legal testing.

โ•พโ”€ Installation

git clone https://github.com/PicoBaz/NexusBrute.git
cd NexusBrute
npm install axios chalk
node index.js

โ•พโ”€ Configuration

Customize config.json:

  • smartBrute: Target URL, usernames, passwords, delay, max attempts, useProxy (true/false).
  • passwordGenerator: Password length, count, special characters.
  • rateLimitChecker: Target URL, max requests, interval, useProxy (true/false).
  • proxies: List of proxies (host, port, protocol), e.g., [{ "host": "proxy1.example.com", "port": 8080, "protocol": "http" }, ...].
  • wordlistOptimizer: Input/output wordlist files, min length, remove duplicates, sort by length.
  • apiFuzzer: Target URL, HTTP methods, payloads, max attempts, delay, useProxy (true/false).
  • sqlInjection: Target URL, payload file (payloadFile, e.g., sql_payloads.json), fields to test, max attempts, delay, useProxy (true/false).
  • ddosTester: Target URL, request count, concurrent requests, requests per second, method (GET/POST), payload, useProxy (true/false).
  • sessionLogger: Log file path, e.g., { "logFile": "session.log" }.

Edit payloads/sql_payloads.json to customize SQL injection payloads.

โ•พโ”€ Usage

Run node index.js to launch the interactive CLI. Select a module and choose output format (JSON, CSV, or both).

โ•พโ”€ Important Notice

Use NexusBrute only on systems with explicit permission. Unauthorized use is prohibited and illegal.

โ•พโ”€ License

MIT License. See LICENSE for details.

โ•พโ”€ Contribute

Join the project at https://github.com/PicoBaz/NexusBrute. Star, fork, or submit a PR to enhance it! ๐Ÿš€

โ•ฐโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ•ฏ