Brutus Password Cracker

A tool by the name of Brutus has quickly become one of the best password crackers on the internet, along with Unix's Crack, Nt's NTCrack, John the Ripper, and The L0pht Crack Series. But unlike those password crackers this one is complely remote based.
Brutus can remotely crack SMB (netbios), telnet auth, HTTP Basic Auth, HTTP Form, POP3, and FTP sessions via brute force attacks. Brutus also has the ability to you to create more BAD or Brutus Application Definition these are custom attacks on Remote applications.

To do this you have to Define the Sequence this is done by going into the dropdown bar labled "Type" then clicking "Custom" This will cause a new button to appear in the Authentication area of the program it's labled"Define Sequence". When you Click it a box appears named Brutus - Authentication Definiton Sequence

http://www.hoobie.clara.net/brutus-screen4.gif

As you can see it has Many options to create custom BAD files.

Here are some more screen shots of the program

http://www.hoobie.clara.net/brutus-screen1.gif

This is the Main Application Window.

[IMG]http--www.hoobie.clara.net-brutus-screen3.gif[/IMG]

Brutus's Wordlist Generator

http://www.hoobie.clara.net/brutus-screen2.gif

Brutus's Brute Force Generator

I hope that you have found this useful or at least interesting.

i used to have brutus and it worked great when i needed to um, test my own security but then i put together a new machine and didnt get brutus back. now i have it and i suggest that anybody that doesnt already have it should get it.

also if you have a default password list for OS's you can run it w/ that password list to check if you have any default password problems.

"Hackers know the Weeknessess of your system, Shouldnt you" That as you know is AntiOnline's slogan. The object of this post was to help system administrators and people that just like to be secure to help secure systems that they own. I just wanted to help.
So to the person that said this.
You have -31 AntiPoints Password crackers are ****ing usless.. Go home you lamer!
Im sorry you feel that way I was just trying to help.

Don't you think this seems sort of suppiscouse? What if it has a virus?

It doesnt ive checked it for virus/trojans and it's clean (trust me i would tell you if it had a virus)

I used Brutus to test my Linux box ounce and I found 9 default passwords and Null logins

if youre afraid of it having a trojan or virus download it, it is a ZIP file, and just have your virus scanner scan as your downloading, that way if it is infected youll no and the virus scanner will stop the download and ask you if you want to keep going. and wow, my scanner didnt detect anything! what a surprise ;) nobody here on AO is mean enough to try and infect fellow members with a trojan or other virus, except maybe the lamers

BTW: I always scan files for Virii&Trojans before I post them anywere I wouldnt knowlingly infect anyone with a trojan or a virus cause that is slowly tearing the internet apart. Thank god for AntiVirus

And Yes Brutus was ment to be a malitious program you can see from the documentation and the fact that it inculdes Netbus.bad in the zip but for the purpose of securing a system that allows remote access it's great.

This tool was given out in a vulnerability assessment course I attended a few years back and it has proven to be very useful. It's the only cracker I know of for most of the things v3n0m356 listed in the original post. Thanks for the re-intro!

I just scanned the file with Norton 's AV and it's Virii free. Thanks v3n0m356!

Another tool for checking HTTP based auth is a tool called Access Driver. Very fast and very reliable.

Hi. I'm new to this site and I downloaded Brutus... I was wodndering, is there a way that Brutus can crack passwords for games?

Hybrid-Theory, yes it could be used that way.
But I do have a suggestion for you. Read this immediately.
You will find your stay here much more pleasent and rewarding.
Welcome to 'AO',

Brutus is a very tacky way to crack pw, since it attempts every single thing on its dictionary file or library file to the target, if the target has a login error threshold (which i think is very common these days), brutus would be quite useless against it.

Is there anyone good enough to crack a philippine yahoo password..If there is I need to talk to you.

*frowns*

*frowns more for antiponts*

*frowns again*

Not a hacking site

*frown*

:)

I hate to say this but Norton System Works says that the file
brutis-aet2.zip s a virus.....
Not a good Idea....

Quote:

---

Originally posted here by Highlander
I hate to say this but Norton System Works says that the file
brutis-aet2.zip s a virus.....
Not a good Idea....

---

It say that about some pen-test tools, even if they are legit.

:verypissed:

umm..look at the pic and explain this one! After I downloaded your brutus,bam.

Funny, my AV just says:
Scan type: Realtime Protection Scan
Event: Virus Found!
Virus name: Hacktool
File: C:\Documents and Settings\me\Local Settings\Temp\BrutusA2.exe
Location: Quarantine
Computer: removed
User: adrian
Action taken: Clean failed : Quarantine succeeded : Access denied
Date found: Sun Sep 12 18:25:10 2004

which is what I would expect. Nothing about subseven. When did you get that message, when you ran the Brutus exe?

kurt_der_koenig...re-read the pic. It doesn't mean anything. It is telling you that someone attempted to connect to sub seven on your computer. That does not mean you are infected. Your message could have appeared for many reasons.

Also - for everyone that is moaning about the file being a virus - why don't you find an alternative source for the download. I know I wouldn't download a binary off any forum, even AO, unless I was absolutely sure about the person sending it. If someone suggested a program to me and were not willing to send the source, I would not download it from them and would seek out a website for the program, or some other download.

[edit] And for the antivirus lovers: just because you scanned the file and your AV doesn't find any viruses, doesn't mean that there isn't a virus in the file. It is possible that the virus might not have been detected by the AV companies before, and therefore there is no definition for it for the scanner.[/edit]

ac

is there a site or somewhere were I can try out Brutus legally? like letting me crack passwords?

If you have a broadband router you can test brute forcing it’s http or telnet password. Here is a Divx Video showing how to do it with Brutus: http://www.irongeek.com/i.php?page=videos/brutus1

Got to Love Google!!!
http://www.google.com/search?sourcei...UTF-8&q=Brutus

Darn.... It seems Norton does not like
Brutis .... Even from the orginal source....

Avant picked up the Brutus download as a Trojan.

Quote:

---

which is what I would expect. Nothing about subseven. When did you get that message, when you ran the Brutus exe?

---

Yeah but it really doesn't matter! I'm clean, Nortan destoried it and then I scanned my box with swatit and it found nothing!

Quote:

---

kurt_der_koenig...re-read the pic. It doesn't mean anything. It is telling you that someone attempted to connect to sub seven on your computer. That does not mean you are infected. Your message could have appeared for many reasons.

---

I know that but it seems weird that when i opened the zip and played around with it; not a half second later this pops up! nvm, just a question.

nice

brutus has been around for a long time... and hardly works anymore! unless your scanning your own boxes for common passwords this tool is pretty worthless,thanks for the trip down memory lane though lol

Hey ArPaNET,

This thread is 2002 vintage, so it was more relevant then? Right now it is of interest to students only, I would have thought?

It was one of, if not the, greatest brute forcer of back then?...................... next thing someone will mention SubSeven............. and the tears of nostalgia will really flow :cry:

oh I agree, definitely a good program to study! LoL I can't wait, SubSeven was a good program... good to hear from you again nihil

I have brutus and whenever i use it everything works fine except what happens is it will attempt the password once and only once and will tell me the password is the first letter in the list i have and i have tried different lists and they all do the same thing. Does anyone know how i can fix this?

I hope we don't start bashing the member for reviving an old thread. It's high time we implement automatic closure system for all threads based on time / inactivity.

Dang-it Byte. I already had my rubber mallet primed and readied. :D

Hi, Some Tuna, and welcome to AO.

Please start a new thread for your question, as it relates to a problem you have in getting the application to work, rather than to the application itself.

;)