Update Http and Web Form bruteforcing.md

enkomio · Jan 5, 2019 · 09d88bc · 09d88bc
1 parent 206271c
commit 09d88bc
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/Doc/Http and Web Form bruteforcing.md b/Doc/Http and Web Form bruteforcing.md
@@ -1,2 +1,7 @@
 # Http and Web Form bruteforcing
-One of the many Taipan addOn, allows to execute an HTTP of Web Form authentication bruteforcing. In this page we will see how to customize this process.
+This AddOn allows to execute an HTTP or Web Form authentication bruteforcing. In order to do so it verify the response code (in case of HTTP bruteforcing) or use a custom heuristic in order to identify if the page returned an authenticated content or not (in case of Web Form authentication).
+
+Under the folder _Data\AddOnStorage\Web Form Bruteforcer AddOn_ you will find three XML files (the file format is self explanatory):
+  * **Combinations.xml** contains the combination of user/password to use. This is useful to test for default account
+  * **Usernames.xml** contaions the list of username to bruteforce. It is suggested to not include a long list, since for each username the entire password list is used in order to bruteforce it
+  * **Passwords.xml** contains the password to use in order to bruteforce all usernames