timing_attack icon indicating copy to clipboard operation
timing_attack copied to clipboard

Would like the ability to constrain the characters/pattern for bruteforcing

Open kaisalmon opened this issue 6 years ago • 1 comments

I am trying to do a quick-n-dirty pentest on a system where an attacker might know that a given code is known to be (in my case) numerical. Is it possible to constrain the characters which are attempted during the brute force to be constrained to some subset (or, even, allow only trying INPUTs that match a certain regex?)

kaisalmon avatar Oct 17 '19 17:10 kaisalmon

That's a great idea; I'll add it when I'm able. I make no promises on how soon that'll be, but in the meantime I'm happy to accept PRs that implement the feature

ffleming avatar Nov 14 '19 15:11 ffleming