New BruteForceAI Tool Automates Login Page Detection and Attacks

A cutting-edge penetration testing tool called BruteForceAI has arrived, bringing automation and artificial intelligence to login page detection and brute-force attacks. Designed for security professionals and researchers, BruteForceAI streamlines two critical stages of a login attack: finding login forms and executing credential trials, with an approach that combines Large Language Model analysis and sophisticated attack features.

The tool uses LLM-powered form analysis to automatically identify login form elements and selectors, enabling users to provide a list of target URLs and have the correct form fields located in seconds.

It supports two main attack modes—full brute-force and password spray—operating in a multi-threaded environment (reportedly up to 100+ threads) with human-like delays and jitter to help evade web application firewalls and intrusion prevention systems, while offering features such as webhook notifications, comprehensive logging, configurable delays, and automatic update checks.

BruteForceAI is available under a non-commercial license on GitHub, with installation and setup details, including prerequisites and commands, provided for rapid deployment.