Re: bruteforce attacks to GUI applications

From: ascii (ascii_at_katamail.com)
Date: 11/17/05

  • Next message: Oscar Kooijman: "RE: Windows Distro" 
    Date: Thu, 17 Nov 2005 03:48:57 +0100
To: security-basics@securityfocus.com

    Kenton Smith wrote:
    > I haven't ever used it, but my understanding is that
    > Brutus does exactly what you say is Hollywood fiction.
    > http://www.hoobie.net/brutus/index.html
    > Kenton

    i never speak about something i never used or at last
    i read carefully the docs on the website : )

    as you can guess from the url you posted brutus (i don't like
    it, these protocols are so dumb you can write your own pwd
    bruteforcer using cat and nc, or for intercative logins some
    language with fread/fputs functions) is a protocol bruteforcer

    Brutus version AET2 is the current release and includes the following
    authentication types :
      HTTP (Basic Authentication)
      HTTP (HTML Form/CGI)
      POP3
      FTP
      SMB
      Telnet
      Other types such as IMAP, NNTP, NetBus etc are freely downloadable
    from this site and simply imported into your copy of Brutus. You can
    create your own types or use other peoples. 

    --
ascii - http://www.ush.it
  • Next message: Oscar Kooijman: "RE: Windows Distro"