Skip to content

flaviusdolca/ip-block-flaw

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2 Commits
 
 
 
 

Repository files navigation

Ip block flaw example Version Python

IP blocking is a tehnique against brute-force attacks. This tehnique consists in blocking the IP of a certain remote user if they make too many login attempts in quick succession. This mechanism in some cases could be vulnerable to bruteforce attacks. For example, you might sometimes find that your IP is blocked if you fail to log in too many times. In some implementations, the counter for the number of failed attempts resets if the IP owner logs in successfully. This means an attacker would simply have to log in to their own account every few attempts to prevent this limit from ever being reached. This script is an example of this vulnerability.

Run script

The script accepts 2 parameters, a mandatory URL parameter and an optional passoword file parameter. By default there is a password list used by the program if you don't specify one.

Usage

Without a password file:

   python main.py URL

With custom password file:

python main.py URL myPassFile.txt