WMAT is automatic tool for testing webmail accounts. Support SSL pages, have automatic generator for default passwords. XML driven patterns. Included on BackTrack 4.
Web Mail Auth Tool
= About:
WMAT is automatic tool for testing webmail accounts. Support SSL pages, have automatic generator for default passwords. XML driven patterns.
= Usage:
-u usernames_file required (except in passsorter mode) -p passwords_file required (except in passsorter mode) -t timeout in seconds !required -w output_file !required --url Webmail URL required --pattern pattern_xml required --bell Bell on success !required --proxy Proxy[IP:PORT] !required" --proxyup Proxy UP [username:password] !required --passsorter File or Email address !required
= Examples:
python wmat.py -u usernames_example.txt -p passwords_example.txt --url webmail.domain.tld --pattern patterns/dummy.wmat.xml
- Basic example
python wmat.py -u usernames_example.txt -p passwords_example.txt --url webmail.domain.tld --pattern patterns/dummy.wmat.xml --bell -w output_file.txt
- Use bell and write output to file
python wmat.py -u usernames_example.txt -p passwords_example.txt --url webmail.domain.tld --pattern patterns/dummy.wmat.xml --proxy xxx.xxx.xxx.xxx:8080 --proxyup username:password\n"
- Use proxy with username and password
python wmat.py --passsorter usernames_example.txt --url webmail.domain.tld --pattern patterns/dummy.wmat.xml --bell -t 5\n"
- Use passsorter engine with bell and timeout 5 sec
= Tips
- If You give url with https prefix, engine will switch to SSL mode
- Passsorter option generate simple passwords from given username(s)
- Must have temp_cookie.txt in the same folder
- Use [amp] instead & in XML files
= Contact:
Ivan Markovic, ivanm@security-net.biz, http://security-net.biz/
- You can contribute to this tool by sending new patterns