command module
v0.0.0-...-729612f Latest Latest

This package is not in the latest version of its module.

Go to latest
Published: Apr 13, 2024 License: MIT Imports: 13 Imported by: 0



Simple tool to bruteforce owncloud instance accounts

A word of caution - tool by default can DOS owncloud instance.



  • make GET request to acquire CSRF token + cookies
  • make POST request using given username and password wordlist.

go install git.sual.in/casual/owncloud_bruteforcer@latest


owncloud_bruteforce -u "https://target.com/login" -P ./rockyou.txt

Owncloud_bruteforcer - tool to bruteforce user

  owncloud_bruteforcer [flags]

   -url, -u string                target's url to login page. Example "https://example.com/index.php/login, http://example.com/login "
   -login, -l string              username to bruteforce (default "admin")
   -login-wordlist, -L string     username wordlist
   -password-wordlist, -P string  password wordlist
   -proxy, -x string              HTTP proxy for packet inspection (Burp/Caidu/ZAP) (for example But be aware, if you enable inspection then attack will fail because of delays
   -threads, -t int               threads to bruteforce (default 10)

Notes (TODO)

  • Expect to DOS service (100% CPU) (even if it have bruteforce protection enabled) if you prefer not to, set -t 5 or less (but it will slowdown attack)
  • Successful login detected by redirect location after POST request. If user have 2FA, then app will not show found login:password. (Detects by redirect location)
  • Bruteforce protection isn't detected (after hitting limit, response to POST - 403 instead 303)
  • If there is internet connection problem or WAF/rate-limit/etc blocked you, you may recieve can't create (POST) request: Post "https://target.com/login": context deadline exceeded (Client.Timeout exceeded while awaiting headers) and attack will stop without a way to continue
  • There is way to bruteforce administrator account which use different endpoint, possibly can allow to bruteforce admin account in same time without slowing down current version of tool


This project is licensed under the MIT License - see the LICENSE file for details. I am not responsible for any actions or damage.


The Go Gopher

There is no documentation for this package.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL