I want to perform testing for brute force attacks on login page of a website. I am new to security testing and I think i can test this by multiple failed login attempts. I wrote the below code to test this but i am not sure which test tool would be good to use and how can i perform this testing on the tool. Could someone please suggest me the tool and educate how would this test can be done by using same tool?

    List<Long> attempts = loginFails.get(login);
if (attempts != null) {
    synchronized(attempts) {
        if (attempts.size() == ATTEMPTS_TO_FREEZE 
            && attempts.peek() > System.currentTimeMillis() - TimeUnit.MINUTES.toMillis(TIME_FRAME_IN_MINUTES)) 
  • Hi Swati there are many tools like burpsuite , OWASP zap , fiddler that act as proxy server and could be used for brute forcing or fuzzing. There is also tools like metasploit that can be used , what is your exact requirement
    – PDHide
    Jun 20, 2019 at 14:28
  • @Swati Mittal - Thanks for accepting the answer, if you have found it useful then please upvote it as well.
    – SRM21
    Jul 24, 2019 at 6:16

1 Answer 1


Below url has provided the definition of Brute Force Attack as well as tools which help to perform such testing:


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.