Interactive Dictionary Attack Simulator with IDS/IPS

Quick run

1. Install Python deps: pip3 install -r requirements.txt

2. Start the server (Terminal 1): python3 victim_server.py

3. Run the attacker (Terminal 2): python3 attacker.py

To demo

• For "NO IDS" screenshot: set FAILED_THRESHOLD = 999 in config.py then restart server, run attacker; it will find password.
• For "WITH IDS" screenshot: set FAILED_THRESHOLD = 5, WINDOW_SECONDS = 20, BLOCK_DURATION = 120; restart server; run attacker; server will log alert and attacker will see 403.

Optional: Snort

Use attack_rules.rules to show a Snort console alert: sudo snort -A console -q -i any -c /etc/snort/snort.conf -R attack_rules.rules

DISCLAIMER** This project is built for educational and ethical purposes only. Misuse of this tool for illegal or malicious activities is strictly prohibited.