BruteForceAI
A penetration-testing tool that uses a large language model to identify login-form fields on a target page, then runs multi-threaded brute-force or password-spray attacks against it.
BruteForceAI is a security-testing tool that combines an LLM with automated login attacks. In its first stage, it sends a page's HTML to an LLM, through Ollama or Groq, to identify the login form's selectors; in its second stage, it uses those AI-discovered selectors to run a multi-threaded brute-force or password-spray attack, with synchronized delays and DOM-change detection to confirm a successful login.
It includes evasion features such as user-agent rotation, jittered delays and proxy support, webhook notifications to Discord, Slack, Teams or Telegram on success, and SQLite logging of attempts so a run can resume without repeating them. It is written in Python and installs into an isolated virtual environment.