About Brutus

Brutus is a powerful vulnerability utilization framework, which is based on modular development and has highly scalable characteristics. In addition, Brutus has multi-tasks and multi-process architectures, therefore has high performance characteristics.

BRUTUS is based on Python, which can automate network-based vulnerability utilization testing and web-based network reconnaissance activities. As a lightweight framework, Brutus is intended to minimize dependence on third-party dependence. BRUTUS is optimized for Kalilinux, which is also compatible with MacOS and most Linux distributions, with a fully interactive command line interface and multi-function plug-in system.

Brutus has a highly scalable modular architecture that runs on the Task Layer, and the task layer consists of a thread pool and a thread safety asynchronous queue. The main thread runs on a multipath pool, the pool management application context and assigns new processes so that the task can run in the background or separate shell.

The BRUTUS’s UI layer is also scalable. By default, Brutus comes with a menu-based command line UI, but the majority of researchers can add GUI, parameter parsers, and httpapi, and more.

In addition, Brutus has a practical program layer with file system operation, shell management, persistence method, and system metadata.


Brutus includes several modules that can be summarized as three categories: web-based, web-based and payload. The last category is a compiler library, with PayLoad, and the BRUTUS’s interactive command line menu can be compiled these PayLoad, which is then loaded to other network-based modules of BRUTUS.

BRUTUS’s underlying use of POSIX threads and multiple tasks, some modules also use Python’s asynchronous I / O library.

Utility / script included:

IP table management HTTPS downgrade to HTTP enable monitoring mode Enable port forwarding keyboard record

Tool installation

First, we need to install and configure the following dependencies:


Brutus is optimized for the Kali Linux system. There are also a lot of information on how to run Kalilinux in the virtual machine, so we will no longer be described here.

After installing the component, we can run the item source code to the local, and do the tool installation:

Gitclonehttps: //github.com/matthewzito/brutus.gitpipenvinstall

Tool use

Tool run:


Execute test:




Configure the Git Hook Development Environment:


Tool use presentation


Tool demo video

Video address:

project address