I need to run some more elaborate brute force tests on my website. Does anyone have any really good user/password combo lists? I really appreciate your help.
-rex1030
Printable View
I need to run some more elaborate brute force tests on my website. Does anyone have any really good user/password combo lists? I really appreciate your help.
-rex1030
google search for "dictionary+files" or "brute force dictionary"..........
or make one...
there was a post about this about 6 days ago, You might like to check that
i2c
-rex1030
What is the name of your website?
A brute force attack does not involve the use of a dictionary file. That is a dictionary attack. If you need to brute force something, write yourself a nice little basic app that would do it. Shouldn't be that hard now, should it?
Cough, Cough.
First post and asking about hacking, cough.
cough, skrip7 ki00ie cough.
Thats giving him too much credit. he's asking about CRACKING ;)Quote:
Originally posted here by mark_boyle2002
Cough, Cough.
First post and asking about hacking, cough.
cough, skrip7 ki00ie cough.
lol
go away, kiddie, and think up a better S-E line next time
Lol, tru dat. He pmed me asking for lists because I know how to crack... If he knew the difference he would understand the fact I suck 100% at hacking, ok maybe not, but I do. Basically what is your website that you want pen tested? We here at AO, those who know what they are doing, and I'll fake it will be able to point you to companies, tutorials, or even help you and do it ourselves. However asking how to hack a website that you do not have permission to is considered illegal and you should read the first page.
-Cheers-
I never asked you how to hack into a website. Not at all. Pardon me if I used the wrong terminology. All I asked for was some combo lists.
I knew you guys wouldn't help me because it is my first post. I read a lot of threads before posting and you guys treat noobies like ****. You were all here once. I am trying to learn everything I can. I am not doing anything illegal because I own everything I hack. You don't know me, so don't assume the worst. If I convince other people to crack my security for me, I won't learn a thing. I knew you guys wouldn't help me, why did I even bother?
Sincerely dissappointed,
rex
http://coast.cs.purdue.edu/pub/dict/wordlists/
http://coast.cs.purdue.edu/pub/dict/ Directory for the integrity of your site!
well well well...
first of all, kudos to the member who decided I was newbiebashing. You sir, can bite me.
You know who you are.
Now onto the issue at hand.
Generally Im pretty nice to noobs. I dont newbie bash. However I wont hold a newbies hand either. You are asking for Dictionary files. You were told right off the bat to google it. LEARN TO USE SEARCH ENGINES. They will save you a LOT of time, along with others time.
Now you want to "test the security of your site". Honestly this has little to do with brute force.
you make your passwords, so you know how secure they will be, you dont need brute force for that. example 7285140876C@D_ant1Cr@ck
good luck brute forcing that one.
If you are ANY kind of administrator you will watch your logs. Your logs will tell you if someone is brute forcing your servers. That simple. Then you block their IP, or pick up the phone and call thier ISP.
Now if you wanted to know about ways into your servers... and listed yhe operating system, software running, and things like THAT, then we could help a little more. THAT is what someone genuinely concerned with testing thier sites security is interested in. IF I was a cracker and IF I wanted to getinto your box, I know I wouldnt waste my time with a bruite force. Id find other exploits. If its MS, it has a lot to choose from, specially if not patched up properly.
(oh yeah patches, didnt mention ANYTHING about what patches you should have installed)...
no you want to brute force. Give me a break.
And dont cry because your first post was about cracking. It was your own wording that did it.
Ill even go as far as to show you a better way to word it that would NOT have gotten the response it did...
"I run a windows 2000 advanced server, and host several FTP and Websites. I am concerned about the security of it, as I dont want it to get cracked into later. What would be the best things to look at to harden it up? Should I bother with a brute force on my own machines, or should I just use really strong passwords? If I was to brute force it, does anyone know where I could finda good dictionary file? Are there any known patches I should have? Are there any vulns or anthing I should watch my logs for?"
Isnt that a little better?
Now Ive taken FAR more time than I wanted to, to explain why you are "getting treated like ****", and why Im "newbiebashing." No one here treated you any different than I would expect to be treated if I asked the question you did, in the same way you did.
Learn to search before you ask. It will save you a lot of trouble.
Avenger.