A tool designed for fast, bulk weak-credential testing across HTTP servers.

Net-Lockpicker

Net-Lockpicker is an automated detection and weak-credential platform. Built with Flask for its web management interface and combining Requests, Selenium, and SQLite, it provides features such as batch URL import, target filtering, automated browser detection, result logging, and task management.

Examples:

1. When you are on an internal network, you can use nmap to scan all HTTP servers: nmap -p 80,8080 x.x.x.0/24, then extract the URLs and import them into Net-Lockpicker to batch test internal HTTP servers that may have weak credentials. Seriously... this is often very effective.
2. When your target is public-facing servers, the tool can similarly test a large number of servers.

Usage

$ python3 -m venv netlockpicker $ source ./netlockpicker/bin/activate $ pip install requests flask selenium urllib3 $ python Net-Lockpicker.py

http://192.168.2.103:5000

Enter the password "h4ck13"

Write targets to .txt file.