Jump to content

Toggle shoutbox Fkn0wned Shoutbox Open the Shoutbox in a popup

@  [VIP]Russian : (27 March 2015 - 01:32 PM) A new post was made on topic Started playing dota
@  Zebloods : (27 March 2015 - 01:25 PM) A new topic called [H]Steam,CoD BO2,CoD AW,CoD Ghosts,Rust[W]Battlefield Hardline. was created on forum Traders District
@  [FkN]Lawliet : (27 March 2015 - 01:21 PM) A new post was made on topic Started playing dota
@  [Owner]TuxifieD : (27 March 2015 - 01:15 PM) A new post was made on topic Fkn0wned Intro
@  [VIP]デイブ : (27 March 2015 - 01:13 PM) A new topic called Started playing dota was created on forum General Discussion
@  Shadowdodger : (27 March 2015 - 12:17 PM) A new post was made on topic Netflix Brute/Checker - Proxyless!
@  [1K]dnbmatrix : (27 March 2015 - 12:09 PM) A new topic called [REQUEST] tumbIr Theme was created on forum Requests
@  [1K]Mystik : (27 March 2015 - 11:49 AM) A new post was made on topic Earl Sweatshirt - I Don't Like Shit, I Don't Go Outside CDQ Leak
@  [VIP]InfectedKush : (27 March 2015 - 11:48 AM) id be too
@  [VIP]Zoofie : (27 March 2015 - 11:48 AM) im suspicious as fuck
@  [VIP]Zoofie : (27 March 2015 - 11:48 AM) >looks at my profile
@  [VIP]Zoofie : (27 March 2015 - 11:48 AM) >new member today
@  nobody2 : (27 March 2015 - 11:29 AM) A new topic called [REQ] Logo for website (multigaming clan) was created on forum GFX Requests
@  [1K]dnbmatrix : (27 March 2015 - 11:28 AM) A new post was made on topic Fkn0wned Intro
@  [VIP]Venomz1337 : (27 March 2015 - 11:06 AM) S3AN, can I add you on skype or steam to discuss the cheat?
@  [FkN]S3AN : (27 March 2015 - 10:56 AM) A new post was made on topic Fkn0wned Intro
@  [VIP]Russian : (27 March 2015 - 10:39 AM) A new post was made on topic Fkn0wned Intro
@  [1K]dnbmatrix : (27 March 2015 - 10:23 AM) A new topic called Fkn0wned Intro was created on forum Comments and Suggestions
@  [1K]dnbmatrix : (27 March 2015 - 10:18 AM) A new post was made on topic Fkn0wned /// Get ALPHA Wristbands?
@  MrIDontHack : (27 March 2015 - 10:01 AM) A new post was made on topic Fkn0wned /// Get ALPHA Wristbands?

[TUT]How to Brute force with Brutus.


  • You cannot start a new topic
  • You cannot reply to this topic
122 replies to this topic

#1
silentr0ck

    The end justifies the means

  • [RnR]Retired and Respected�

  • PipPipPipPipPipPipPipPipPipPipPipPipPip
  • 5,640 posts
  • 171 points
  • Joined 27-August 10

Posted 09 April 2011 - 06:32 PM

Hey fkn0wned,

[hide]

In the following tutorial i will show you how to Brute Force a website which contains normal HTTP Login Form. That means it has an entry for a username and a password. We will do so by using a program called Brutus. In order to do so, you must find a website that 1) Contains only Username and Password fields, and 2) Allows unlimited attempts at guessing a specific password. In order to test if the website allows this, try multiple incorrect passwords for a random username and see what response you get after x amount of attempts. If you get no redirect page and you are not limited in the number of login attempt, chances are the website is vulnerable to Brute Forcing.

*Some credit should be given to littleX on his original tutorial on Brutus Press Here for his Post but it wasn't very thorough or easily comprehended so i created this to be completely noob friendly.

Before we get started you might be wondering what Brute Forcing is; it is simply testing a list of passwords to a list of usernames and hopefully you will have matched a username and password combination that is correct. There are many disadvantages in using this method to hack, such as time (you need to test thousands if not millions of combination) and most websites now have features that limit the number of incorrect guesses at one's password, or make a human verification field mandatory when logging in. Let's get started.


What You Will Need:

1) Download Brutus: http://www.hoobie.net/brutus/
2) Download Password List: http://area51archive...tl...sword_List
3) You will need a proxy or VPN that changes your IP address for all programs, not just your web browser. I would suggest using CyberGhost VPN or Hot Spot Shield. They are pretty easy to use and are well documented so if you need help using them, please search or go to their websites.
4) [Optional] A list of usernames, but if you are trying to get a specific users password, you can simply create your own text file with the username written within it. This will help reduce the amount of time needed for the program to run (because you only have one user)

Getting Started:

An example of a simple form Login is one as follows (which i just created in HTML as a means to demonstrate such) I am not going to give any real websites just to avoid any conflict. Once you have found a website that looks similar to that, test it a few times to makes sure it doesn't limit how many times you type in an incorrect password. Once you have verified that it may be vulnerable to Brute Forcing, lets get started.


Posted Image

Step One: Start Brutus:

Posted Image

Leave the target field alone for the moment and where it says type choose HTTP (Form) You will see that below it a new option has appeared called "Modify Sequence." Press this.

Step Two: Specifying Your Target:

Find the URL that links directly to the login page of the website. For example: http://www.website.com/login; Insert that URL into the Target Field. After doing so press learn from settings. You will now see something similar to the following screen:

Posted Image
As you see, On the left hand side it states "Field Name" that gives options such as username and password. Select the Username under the Field Name list and press the button that says Username. Do the same with the password and hit password. This lets Brutus now where to input its list. Press accept and it will return you to your previous screen. If, when you were testing you got a message that says, "Incorrect login" or something similar, copy it and paste it under the HTML Response boxes. Press Okay when your complete. We need to do one more thing before we start.

Step Three: Setting the Word lists

The Next step is fairly simple. Go to the option that says "User File" and select the text file that contains the usernames you would like to Brute Force. The beside under "Pass File" specify your password list. Before you hit Start make sure all the optional variables are set to your satisfaction (the default are usually fine); start your proxy, make sure your IP address is masked than hit Start. Allow the program to run for as long as you want or until it has completed and hopefully you have gotten some passwords!


[/hide]
+rep NIGGAS

Posted Image
Posted Image

Spoiler



[FkN]silentr0ck

#2
D0t1q

    Kill me slowly

  • [FkN]ServerTech

  • PipPipPipPipPipPipPipPipPipPipPipPipPip
  • 6,565 posts
    • Time Online: 27d 8h 9m 46s
  • 571 points
  • Joined 01-October 10
  • LocationBC Canada

Posted 09 April 2011 - 08:38 PM

better be goodcan never get this to work

Sigs
<3UFKN JAH
k869jq7.png

Spoiler


#3
linxix

    Member

  • [VIP]General VIP

  • PipPipPipPip
  • 99 posts
    • Time Online: 5h 6m 4s
  • 0 points
  • Joined 16-March 11

Posted 07 May 2011 - 08:28 PM

+rep :)

#4
Remii

    Noob

  • New Member

  • PipPipPip
  • 48 posts
    • :
  • 0 points
  • Joined 03-April 11

Posted 08 May 2011 - 05:20 AM

ty

#5
NiEDEZ

    Mess With The Best -Die Like The Rest.

  • Member

  • PipPipPipPipPipPip
  • 405 posts
    • :
  • 0 points
  • Joined 01-May 11

Posted 08 May 2011 - 07:46 AM

ty
NiEDEZ List:
-

[X]Learn SE.
[X]Keylogg 25 People
[X]Learn SQL iNj

#6
Mihadis

    Senior Member

  • New Member

  • PipPipPipPipPip
  • 228 posts
    • :
  • 0 points
  • Joined 08-May 11

Posted 10 May 2011 - 02:04 AM

tnx

#7
shorty1911

    Noob

  • Member

  • PipPipPip
  • 41 posts
    • :
  • 0 points
  • Joined 25-December 10

Posted 10 May 2011 - 07:08 AM

ty

#8
jETZKYE

    God Is The Best Designer!

  • Faggot-->--->Faggot<---<--Faggot

  • PipPipPipPipPipPipPipPip
  • 1,028 posts
    • :
  • 0 points
  • Joined 07-August 10
  • LocationWales

Posted 29 May 2011 - 06:58 AM

thanks man :)

Welcome To Fkn0wned
••••••••••••••
jETZKYE
••••••••••••••

Posted Image

••••••••••••••••••••••••••••••••••••••••••
Hotmail : [email protected]
••••••••••••••••••••••••••••••••••••••••••

I DON'T PLAN, I IMPROVISE


#9
CrimboCollision

    Irresponsible Leecher

  • Member

  • PipPipPipPipPip
  • 199 posts
    • :
  • 0 points
  • Joined 26-May 11

Posted 29 May 2011 - 09:46 AM

unhide

Posted Image
Made by Uberkist <3

 


#10
dgrock

    ViCiOuS DeLiCiOuS

  • [1K]1K Club

  • PipPipPipPipPipPipPipPipPipPipPip
  • 3,022 posts
    • Time Online: 6h 42m 41s
  • 9 points
  • Joined 04-May 11
  • LocationIsrael

Posted 30 May 2011 - 10:52 AM

ty

SoundCloud:


https://soundcloud.com/yogevzenesh


Listen,comment,like,share


#11
darklord213

    Member

  • New Member

  • PipPipPipPip
  • 116 posts
    • :
  • 0 points
  • Joined 22-June 11

Posted 23 June 2011 - 01:38 AM

Hey fkn0wned, +rep NIGGAS



#12
bamaman

    Member

  • New Member

  • PipPipPipPip
  • 85 posts
    • :
  • 0 points
  • Joined 02-June 11

Posted 23 June 2011 - 08:46 AM

i am interested!

#13
A9672B

    I came here to f**k bitches

  • [1K]1K Club

  • PipPipPipPipPipPipPipPip
  • 1,061 posts
    • Time Online: 6m 5s
  • 1 points
  • Joined 14-August 10
  • LocationGermany

Posted 23 June 2011 - 11:54 PM

thx

MSN: legendaryoutsider[at]hotmail[dot]com


Posted Image


I live in a world of fantasy
So keep your reality away from me
I see what I want
I want what I see
And that is all Okay by me


#14
capnpir8

    Noob

  • New Member

  • PipPipPip
  • 21 posts
    • :
  • 0 points
  • Joined 10-May 11

Posted 24 June 2011 - 08:21 AM

Thanks

#15
StrikkerPT

    StrikkerPT

  • BANNED

  • PipPipPipPipPipPipPipPipPip
  • 1,772 posts
    • :
  • 0 points
  • Joined 05-August 10
  • LocationPortugal

Posted 24 June 2011 - 11:48 AM

interested

#16
BloodStained

    Imperial Guard

  • [VIP]General VIP

  • PipPipPipPipPipPipPip
  • 931 posts
    • Time Online: 7d 21h 56m 42s
  • 50 points
  • Joined 09-June 11

Posted 24 June 2011 - 03:04 PM

Thx
Posted Image

#17
samxkim

    Noob

  • Member

  • PipPipPip
  • 16 posts
    • Time Online: 1m 15s
  • 1 points
  • Joined 29-June 11

Posted 29 June 2011 - 07:56 PM

thx

#18
unreal

    Senior Member

  • Member

  • PipPipPipPipPip
  • 228 posts
    • Time Online: 35m 41s
  • 4 points
  • Joined 19-June 11

Posted 04 July 2011 - 05:46 AM

show me

#19
RiggeX

    Fkn Savior

  • [1K]1K Club

  • PipPipPipPipPipPipPipPip
  • 1,174 posts
    • Time Online: 38m 19s
  • 0 points
  • Joined 17-August 10
  • LocationCanada

Posted 04 July 2011 - 05:47 AM

thank yeah.

I assume my post has changed your life. If you have a soul, +rep

Posted Image

Posted Image

http://uurr.ru/free-dirt3/


#20
kk4you

    Member

  • New Member

  • PipPipPipPip
  • 100 posts
    • :
  • 0 points
  • Joined 09-February 11

Posted 18 July 2011 - 02:40 PM

h