Skip to content

Latest commit

 

History

History
87 lines (55 loc) · 2.51 KB

README.md

File metadata and controls

87 lines (55 loc) · 2.51 KB
Raw

Callow

Callow

Callow is a simple brute-force script for website login pages. It is meant to be a toy project, and is not intended for use in any serious capacity.

Requirements

  1. Python 3.10+
  2. Google chrome
  3. ChromeDriver

Note: Use the ChromeDriver version corresponding to your Chrome version.

Installation

  • Clone the repo
git clone github.com/maximousblk/callow.git
  • Install dependencies:
pip3 install -r requirements.txt

Updating

If you want to get most recent updates for Callow, just pull the latest changes:

git pull

Quick Start

If you are doing this first time, you can test this safely on the sandbox

Most important part for this to work is to get the selectors right.

  1. Run callow.py in the installation directory
  2. Enter the URL for the login
  3. Go to the login page
  4. Open developer tools using Ctrl + Shift + I
  5. Enter the css selector for <input> tags for username and password field
  6. Enter the username or email of the target
  7. Enter the location of the password dictionary/list and hit Enter

Wizard

Check out my blog post if you want a more elaborate guide.

Arguments

You can also pass those options in the form of arguments.

You can see the options for Callow here.

Option Function
--site Target website (http/https only)
--usel Username input selector
--psel Password input selector
--user Target username to attack
--pass Password dictionary

Here is an example of how to use the arguments:

Arguments

To Do

  • Port to Python 3.x
  • Cross platform compatibility
  • Proxy/Tor support

For more, look into issues and projects...

Disclaimer

This project (Callow) and it's contributors do not support or take responsibility for any form of unethical acts. This software is purely for educational purposes and is not intended to cause any harm.

License

Callow is available free of charge under the GPL-3.0 license and can be used for both, commercial and non-commercial purposes.