Real-Time Authentication & OTP Security Assessment Tool
RLCheck Pro is a controlled, low-volume security assessment tool designed to evaluate authentication flows, rate limiting, and OTP verification mechanisms.
- Multi-Signal Rate-Limit Detection: Status codes (429, 403, 423), standard headers (
Retry-After,RateLimit-*), timing analysis, and response body keywords. - Account / Session Lockout Analysis: Detects temporary suspensions, lockout indicators, and state shifts.
- Anti-Automation & CAPTCHA Detection: Recognizes reCAPTCHA, hCaptcha, Cloudflare Turnstile, and challenge pages without attempting bypass.
- Automated Flow Discovery: Discovers login forms, OTP challenges, and handles CSRF tokens across form transitions.
- Controlled & Safe Testing: Enforces hard caps on request volume and minimum request intervals (never brute-forces).
- Multiple Reporting Formats:
- Live Rich terminal dashboard
- Structured JSON reports
- Standalone HTML reports
- Local Web Interface: Flask-based real-time assessment dashboard with Server-Sent Events (SSE).
# Clone the repository
git clone https://github.com/ethicalhacker-0101/Ratelimit.git
cd Ratelimit
# Create a virtual environment
python -m venv .venv
source .venv/bin/activate # On Windows: .\.venv\Scripts\activate
# Install dependencies and package
pip install -r requirements.txt
pip install -e .rlcheck auth https://example.com/login --user testuser --password testpassrlcheck login https://example.com/login --user testuserrlcheck otp https://example.com/login --user testuser --password testpass --test-otp 000000rlcheck web --port 8080Open http://127.0.0.1:8080 in your browser.
rlcheck report reports/rlcheck-YYYYMMDD-HHMMSS.json --format htmlpytest -v --cov=rlcheckRLCheck Pro is intended strictly for authorized security assessments, penetration testing, and defense validation. Controlled request mode is enforced by default to prevent denial of service or disruption.