The Remote Web Workplace Attack tool will perform a dictionary attack against a live Microsoft Windows Small Business Servers "Remote Web Workplace" portal. It currently supports both SBS 2003 and SBS 2008 and includes features to avoid account lock out. It is written in Python and requires pycurl.
