Brute modes

The brute library supports different modes that alter the combinations used in the attack. The available modes are as follows:

• user: In this mode, for each user listed in userdb, every password in passdb will be tried, as follows:

  $ nmap --script <brute force script> --script-args brute.mode=user
  <target>

• pass: In this mode, for each password listed in passdb, every user in userdb will be tried, as follows:

  $ nmap --script <brute force script> --script-args brute.mode=pass
  <target>

• creds: This mode requires the additional brute.credfile argument, as follows:

  $ nmap--script <brute force script> --script-args brute.mode=creds,brute.credfile=./creds.txt <target>

To make sure that you only guess each password once, use the brute.unique argument. By default, it is enabled. Set it to false to disable it:

$ nmap --script <brute force script> --script-args brute.unique=false
<target>

To set the number of...