I was looking for such kind of tool ..
obviusly any form is different from others ..
but a tool that with some tweaks
let you run a dict or brute force attack
against a login form for example on a web page does exist ?

I think "Brutus" can do such a thing I have had a look before and it says things like HTTP (FORM) and HTTP (AUTH) if i remember maybe worth having a look?

check out form@

you'll find it at deny.de

WWWHack or Brutus are the two most known ones. Brutus is freeware, and WWWHack is sharreware.

well brutus it's not good ..
wwwhack a little better but still too little flexible to be usefull ..
form@ sounds good by the name but I wasn't able to find it on deny.de ..
and not even by google due to the "@" in the name ..
do you have the exact name of the zip ?

for all trial members replying here :
I'm NOT looking for tools to bruteforce BASIC http authentication ,
but "homemade" web forms ..
it's different ..

Wasat and WebSleuth are pretty good.Websleuth does a lot more too.
Perhaps Crackwhore as well.

hxxp://sss.deny.de/

well brutus ****it is the best******

CForce is good, Form@ is also cool. and the program Caecus for OCR's are nice also

When I needed to brute force a web-login system (successfully) I wrote a program that connected to the server, sent the correct headers, replacing the password for each entry in a dictionary file. Then, it recieved the feedback and analyzed it to see if the attempt was successful or failed.

Use Access Driver, it's pretty good one,it's mainly designed for http basic auth attacks, but has so much more.
If you cannot find it, contact me on governmentsecurity irc server, my nickname on it is uname-a, i'll be pleased to send it to you.

/edit
oops sorry, link was already posted..

any link ?
thx

[quote]
any link ?
thx

[/quote
caecus..dunnno abt cforce
http://sentinel.securibox.net/Caecus.php

[/quote
caecus..dunnno abt cforce
http://sentinel.securibox.net/Caecus.php

[/quote]

very nice tool ..
but I don't need the ocr by now ..
It seems that this cforce is the tool of the moment in this field ..

WWWhack and Access driver there the best for what i think

you can download them here

http://solitare.e2u.cc

the WWWhack has the regestration code in the zip
and access driver is free

check it out

hate to ask this but can anyone post a link to cforce or upload it here, i cant find it.... thanx