1 Features: 2 ** find a damn difference between a page not existing and not being 3 accessible 4 * add memwatch support to ./configure script 5 * variations on passwords (uppercase, adding numbers etc) (suggested by Panagiotis Issaris) 6 * random entry support (so server logs wont show AS much of a pattern) 7 * statistics (average tries per second, average hits per hour etc) 8 + html output 9 + text output 10 * multiple hosts (maybe) 11 - host at a time 12 - round robin 13 * reimplement tilde_expand so we dont need readline (patch submitted, not yet merged) 14 * method to replace certain chars (ie: o->0 etc) 15 * support for the following: {username[5]} which would display the first 16 5 characters of username 17 18 General: 19 * replace sleep() with something reasonable 20 21 Debugging: 22 * get rid of memory leaks/problems reported by memwatch 23 * check for buffer overflows 24 25 Further testing: 26 * session support 27 * error/success codes return by various web servers 28 * make sure this is the optimal way to brute force 29 30 Documentation: 31 * further explain options if needed