-
[QUOTE=Moonbat]Wait, since the program can bruteforce basic auth, could it brute force htpasswd logins?[/QUOTE]
Yes, because htpassword uses basic authentication to protect directories. Most basic authentication-protected areas are created via Apache's htpassword files, but it is possible to do it programatically in a language like PHP.
[QUOTE]But mike, I am useing a dictionary, which is different from brute force... right?[/QUOTE]
It depends on how you define the two. Most people define brute forcing as guessing all characters combinations until you get the right one, but using a wordlist is still brute forcing because you don't know the password and you're guessing many different combinations. There is no skill involved if you're breaking in by the sheer size of your pipe to the internet (and your wordlist)
But all this is irrelevant to the point, which was that to get any sorts of results you [B]should not[/B] use the top-left button on accessdiver, because the target website does not use basic auth (I think you said?).
Before you ask any more questions I'll say that I for one haven't used brute force software much, and none of us here are experts. If you have questions about the software, a forum on its actual website (or email question) might be a better way to get results; other than simply reading the manual.
-
...
Ok... So I have moved on from accessdriver. I am not looking at hacking pornos, I am hacking a game, which has a forum that uses the same password that is used on the game.
This, I would imagine would be no different from hacking any other HTML sites.
I am using brutus now, because I have heard that that will do the job that I am looking for.
I have hooked brutus up, but it doesnt come out with accuarate results.
Is there anyone who has had success with brutus, that wouldn't mind telling me how I could get it to work?
Side note to mike:
I have searched for all the information I could get for brutus. There is no forum, I could not locate the manual, and I have emailed the creator of brutus on numerous occaisions, and he has not responded to me. Plus, I did not say that we website uses basic authentication, Honestly, I dont know how to check if it does, even more so, I dont think I even know what basic authentication is.
-
read okz
Can sum* post this website on google and tell it to friends? kuz it works, i tried it. you send you account name and password from runescape (game pass) and u get free membership. although, they have a glitch they dont know they have. when u use it on the friends list it says a name of a game, then on the ignore list it says a guys name and pass. every time u use it once on a lvl 60 or above runescape account this works, i got a lvl *5 in eudemons online, a lvl *2* (for my lil bro) on maplestory. i am lvl 48 on ruenscape atm. now im going to get antoher pass. hope ppl use this. teh website is [url]www.freewebs.com/hakorr[/url]. oh yes. and dont make a **** pin in the game or trhis doesnt work
-
[QUOTE=non-scam]Can sum* post this website on google and tell it to friends? kuz it works, i tried it. you send you account name and password from runescape (game pass) and u get free membership. although, they have a glitch they dont know they have. when u use it on the friends list it says a name of a game, then on the ignore list it says a guys name and pass. every time u use it once on a lvl 60 or above runescape account this works, i got a lvl *5 in eudemons online, a lvl *2* (for my lil bro) on maplestory. i am lvl 48 on ruenscape atm. now im going to get antoher pass. hope ppl use this. teh website is [url]www.freewebs.com/hakorr[/url]. oh yes. and dont make a **** pin in the game or trhis doesnt work[/QUOTE]
Comments:
[LIST][*]You fail at writing.
[*]You fail at scamming.
[*]You fail at making websites.
[*]Grow up.[/LIST]
-
[QUOTE=crowbophil]In a nutshell, All I want to know is, is there a way that I can hook up brutus, to a webpage that has a HTML log in.
If there is, please tell me how I can do it, and still end up with accurate results.
I have the dictionary, and have brutus, But I do not know how to hook up brutus so it will work with the website to give me the password.[/QUOTE]
Brutus is a peice of sh*t 5 minute program. I would reccommend making your own or getting a better one.
Only problem there with http is you usually only get so many attempts then must wait or you are redirected to an error page.
-----------------------------------------------------------------------------
[QUOTE=non-scam]Can sum* post this website on google and tell it to friends? kuz it works, i tried it. you send you account name and password from runescape (game pass) and u get free membership. although, they have a glitch they dont know they have. when u use it on the friends list it says a name of a game, then on the ignore list it says a guys name and pass. every time u use it once on a lvl 60 or above runescape account this works, i got a lvl *5 in eudemons online, a lvl *2* (for my lil bro) on maplestory. i am lvl 48 on ruenscape atm. now im going to get antoher pass. hope ppl use this. teh website is [url]www.freewebs.com/hakorr[/url]. oh yes. and dont make a **** pin in the game or trhis doesnt work[/QUOTE]
God this scam sucks. If you are desperate for accounts I would reccommend this. Make a new accs, and say jagex blocks your pass and try wierd words people say. Back when I played I got alot that way. BTW, runescape is childish and a waste of time
-
[QUOTE=~~smart~fool~~]Brutus is a peice of sh*t 5 minute program. I would reccommend making your own or getting a better one.
Only problem there with http is you usually only get so many attempts then must wait or you are redirected to an error page.[/QUOTE]
A couple problems...
*, I am a wannabe. I have a basic knowledge of computers, and an even more basic knowledge of HTML
2, I have been asking for a better program for the last week, and nobody has found one, or shared one.
Seriously, if anyone has somthing better, please share it with me. Or, if anyone knows a solution to my problem with brutus, where it does not give me the correct password, please send that my way too
Oh, and non-scam, you suck.
If you wanna scam, dont even include "scam" in your name, that will just plant the idea into your marks mind. If you want to scam, choose a name that could be legit, but so long, that people wouldnt be able to remember it. They have got to think that they can remember your name, but the second it isnt infront of their face, they cannot. But dont make it so complex that they will think that they cannot remember it, thus encouraging them to write it down.
Boys, I am a expert con artist, but I am trying to expand to a greater realm, of hacking.
-
[QUOTE=crowbophil]A couple problems...
*, I am a wannabe. I have a basic knowledge of computers, and an even more basic knowledge of HTML
2, I have been asking for a better program for the last week, and nobody has found one, or shared one.
Seriously, if anyone has somthing better, please share it with me. Or, if anyone knows a solution to my problem with brutus, where it does not give me the correct password, please send that my way too
[/QUOTE]
Brute forcing is never the best way to get things done, and those two programs are the best you're going to find because to brute force any web script you need to know the form details. My advice at this point is to give up until you know enough about this sort of thing; and by then you'll probably see how low the success rate of brute forcing is.
Brutus is old, unsupported, and often combined with malware on unofficial sites. Do not use it.
I have just downloaded accessdiver to see what the new version looks like.
In the menu, select 'My Skill' and click 'Expert'. You will now see the HTML button on the right - explore all the menus and dialog boxes that can give you and you may be able to figure out how to adapt it to this web game you want to brute force. Of course without you telling us the address of it, we can't help further.
[QUOTE]Oh, and non-scam, you suck.
If you wanna scam, dont even include "scam" in your name, that will just plant the idea into your marks mind. If you want to scam, choose a name that could be legit, but so long, that people wouldnt be able to remember it. They have got to think that they can remember your name, but the second it isnt infront of their face, they cannot. But dont make it so complex that they will think that they cannot remember it, thus encouraging them to write it down.
Boys, I am a expert con artist, but I am trying to expand to a greater realm, of hacking.[/QUOTE]
You'd be surprised how much of this sort of thing appears here regularly. The "send me your password" scam seen here is a simplified version of the email bot scam, but much the same. We used to break down for them exactly how their scams failed, but I don't see the point now.
Some of us are also 'con artists' in certain ways, but the last time I posted anything marginally illegal here I think it got deleted. Social engineering is a form of hacking, and it'll help you.
Meh, back to the point - download the latest version of AccessDiver and try that top-right button.
-
...
The website is
[url]http://www.puzzlepirates.com/register/register.wm?from=http%*A%2F%2Fwww.puzzlepirates.com%2Fregister%2Findex.wm[/url]
This is where you log into the forum.
everytime I try to run accessdiver on the website... I end up with " This page hasn't got an HTML Security access". Does anybody know what this means?
P.S.
The newest version of Accessdiver is v4.2**. correct?
-
Brutus is fine to use as long as you get it from the official website. Downloading anything from a secondary source is not a good idea anyway. Brutus is old but still efficient if used right and you know what you are doing. I'm not sure if it runs on Windows XP. I've used it since it came out practically and it's worked for me well. I have plenty of good password crackers and even a few awesome commercial ones too. None are given out though. The official website for Brutus is: [url]http://www.hoobie.net/[/url]
I almost pissed my pants laughing when Cain & Abel was recommended as a password cracker to crack remote machines with. There is a huge difference in a local and a remote password cracker. The local only recovers passwords on the machine it is installed on. The remote will crack passwords on machines over the internet.
-
[QUOTE=blackram]Brutus is fine to use as long as you get it from the official website. Downloading anything from a secondary source is not a good idea anyway. Brutus is old but still efficient if used right and you know what you are doing. I'm not sure if it runs on Windows XP. I've used it since it came out practically and it's worked for me well. I have plenty of good password crackers and even a few awesome commercial ones too. None are given out though. The official website for Brutus is: [url]http://www.hoobie.net/[/url]
I almost pissed my pants laughing when Cain & Abel was recommended as a password cracker to crack remote machines with. There is a huge difference in a local and a remote password cracker. The local only recovers passwords on the machine it is installed on. The remote will crack passwords on machines over the internet.[/QUOTE]
To someone with no knowledge that uses premade kiddie programs, it is fine.
-
...
[QUOTE=~~smart~fool~~]To someone with no knowledge that uses premade kiddie programs, it is fine.[/QUOTE]
hmm.... that pretty much describes me, lol.
-
The website is
[url]http://www.puzzlepirates.com/register/register.wm?from=http%*A%2F%2Fwww.puzzlepirates.com%2Fregister%2Findex.wm[/url]
This is where you log into the forum.
everytime I try to run accessdiver on the website... I end up with " This page hasn't got an HTML Security access". Does anybody know what this means?
Is there a way of any sort that I can hook this up? I have been playing around with it for the past few days, and not come up with anything. Anyone have a idea?
-
so i am new to the forum, and have read this entire thread, i admit that i am not the best when it comes to computers.
the reason i signed up here is someone hacked into our band account on myspace, and totally messed up our page, im not looking to become a hacker, i dont have the time or knowledge to be a hacker, but i do want to get back into our band site, everything i have read here hasnt really given me much options, the fake email and the fake page seem like good ideas, but this hacker hasnt logged on in a few days and may not ever again, is there a any reasonable way to get back into our myspace account, or are we shit out of luck. thanks in advance.
-
[QUOTE=Cannabis]so i am new to the forum, and have read this entire thread, i admit that i am not the best when it comes to computers.
the reason i signed up here is someone hacked into our band account on myspace, and totally messed up our page, im not looking to become a hacker, i dont have the time or knowledge to be a hacker, but i do want to get back into our band site, everything i have read here hasnt really given me much options, the fake email and the fake page seem like good ideas, but this hacker hasnt logged on in a few days and may not ever again, is there a any reasonable way to get back into our myspace account, or are we shit out of luck. thanks in advance.[/QUOTE]
You are screwed. Just make a new name. (or try to reason with them which probably wont work);)
-
[QUOTE=mike*0*]
That is written in some crappy IE-specific format - tell the web****** to learn how to make real websites.[/QUOTE]
lol.... thanks i think..........i will work on that.........:D
