Brute-force credentials across protocols with modular payloads

patator is a brute forcer built around modules, one per protocol or service, so a single engine tests credentials over SSH, FTP, HTTP, MySQL, and more. You choose a module, supply host, username, and password sets, and patator walks the combinations while you control concurrency, timing, and how responses are filtered.

Its value is precision over raw speed. Instead of printing every attempt, you tell patator which responses to ignore, so failed-login noise collapses and only the results worth reading remain. Payload sets iterate as a full cartesian product or in lockstep, and start and stop offsets let you resume a long run where it left off. Each pass ends with a Hits/Done/Skip/Fail/Size summary that reports how many candidates were kept, tried, and planned.

On Trickest, patator takes host, username, and password files and writes a file and a folder of results. Wire it in as the credential-testing stage after host and service discovery, scoped to the protocol its module targets and paced to stay inside the target's tolerance.