A Node.js tool for ethical security testing.
NexusBrute is designed for security professionals to perform controlled brute-force tests, generate secure passwords, and analyze API rate limits. Built for precision and compliance, it ensures safe and authorized use.
- Smart Brute: Controlled login testing with rate-limiting.
- Password Generator: Creates strong, customizable passwords.
- Rate Limit Checker: Analyzes API request restrictions.
- Proxy Rotator: Dynamic proxy switching for stealthy requests.
- Wordlist Optimizer: Streamlines password lists by removing duplicates and sorting.
- API Fuzzer: Tests APIs with varied inputs to uncover vulnerabilities.
- SQL Injection: Tests forms for SQL injection vulnerabilities with pre-defined payloads.
- Output: Exports results in JSON and CSV formats.
- Compliance: Engineered for ethical, legal testing.
git clone https://github.com/PicoBaz/NexusBrute.git
cd NexusBrute
npm install axios chalk
node index.js
Customize config.json
:
smartBrute
: Target URL, usernames, passwords, delay, max attempts,useProxy
(true/false).passwordGenerator
: Password length, count, special characters.rateLimitChecker
: Target URL, max requests, interval,useProxy
(true/false).proxies
: List of proxies (host
,port
,protocol
), e.g.,[{ "host": "proxy1.example.com", "port": 8080, "protocol": "http" }, ...]
.wordlistOptimizer
: Input/output wordlist files, min length, remove duplicates, sort by length.apiFuzzer
: Target URL, HTTP methods, payloads, max attempts, delay,useProxy
(true/false).sqlInjection
: Target URL, payload file (payloadFile
, e.g.,sql_payloads.json
), fields to test, max attempts, delay,useProxy
(true/false).ddosTester
: Target URL, request count, concurrent requests, requests per second, method (GET/POST), payload,useProxy
(true/false).sessionLogger
: Log file path, e.g.,{ "logFile": "session.log" }
.
Edit payloads/sql_payloads.json
to customize SQL injection payloads.
Run node index.js
to launch the interactive CLI. Select a module and choose output format (JSON, CSV, or both).
Use NexusBrute only on systems with explicit permission. Unauthorized use is prohibited and illegal.
MIT License. See LICENSE for details.
Join the project at https://github.com/PicoBaz/NexusBrute
. Star, fork, or submit a PR to enhance it! ๐