Account Verification

Account Verification

Usually, when we log in to the site, it will be moved to a different page. This is one of the ways that brutemap uses to find out if the account has the potential to be found by matching the previous page with the current page. However, if this method doesn't work, brutemap provides several supporting options.

Regular Expression's

This option is very useful, if you know exactly your target page. To use this option you only need to make the file contain a json object (or string) with the key name is hostname target and the value of the key is regular expression. For example, save this as regex_map.json or up to you:

{
    "www.example.com": "(?i)Dashboard"
}

To use it:

python brutemap.py -t http://www.example.com/admin/login.php -rM regex_map.json

Or, use the --regex-map option.

Prompt

This option is useful for displaying a prompt, if you are not very sure of the brutemap account trial results. You can use it, like this:

python brutemap.py -t http://www.example.com/admin/login.php --prompt