Latest ads
-
Sell your Land, House on idamata.lk for FREE
- sajith.xp.pk
- Updated:
-
Handmade Character Soft Toys- anil1961
- Updated:
-
Bodim.lk out now !- Manoj Suranga Bandara
- Updated:
-
Power Lifting Lever Belt- SkullVamp
- Updated:
-
port.lk Domain for sale
- Lankan-Tech
- Updated:
~H~A~C~K~I~N~G = ASk
- Thread starter 12345
- Start date
melakamc said:wateva!!
iv seen thousands of ppl like u in EK...so up to now wat have you put in the thread abt hacking???
DONT BOAST...DO SOMETHING USEFUL
look bro....i havent told that im a hacker in any where in this forum.im just shring what i kno upto know...thats all....
12345 said:
12345 said:
so den anyone can google and get info abt hacking!!
temme wats yo purpose!!???!!
Rovin said:
mehemai.....
first facebook login page ekak wage ekak create karanna one..full professional original widihata......then URL eka mask karala iwara.......facebook eke link ekak widihata enna danna one.....
eka full professional wena taramata wade saarthaka wenne .........
but 100% success wei kiyala kiyanna ba.but just giv it a try.....
melakamc said:
yes they can.....but as far as i kno...google cant discuss rite? it will just give what you search.but its better to discuss it with people....hope u understand it.
*****
***** is a multifeature Web password cracker. The program is written for ****** only but allows for a number of different types of authentication **** forcing, including:
· HTTP (Basic Authentication)
· HTTP (HTML Form/CGI)
· POP3 (Post Office Protocol v3)
· FTP (File Transfer Protocol)
· SMB (Server Message Block)
· Telnet
Although HTTP Basic is the most ubiquitous program on the Internet today, HTTP Form is close behind. To use ***** to ***** force a standard HTTP Basic page, we need only input the target in the Target field, select HTTP (Basic Authentication) in the Type field, and then select the type of Authentication Options (by default it will use the most common of usernames and passwords). Figure 15-5 shows how ***** can be set up to brute force known usernames and passwords.
Figure 15-5. **** ****** forcing an HTTP Basic connection
The Positive Authentication Results window shows that the administrator username and test username have been confirmed to have a blank password and the word "test," respectively.
However, if we have exhausted our list of usernames and passwords, we can allow **** to identify the password with its brute-force options. As shown in Figure 15-6, with these options we can select the size and composition of the password in an attempt to include the full ASCII keyspace or a customized range.
Figure 15-6. ****'s *****-force password options
Then when **** runs, which could take some time, it will attempt all the permutations of the set created. Figure 15-7 reveals that, with 0–6 length and lowercase alpha as the composition, the complete brute force will take about a month on a P4-1.2 GHz machine. Not quite the speed we were looking for, but the feature is robust.
Figure 15-7. ***, using the true ****-**** feature
But the real advantage of using *** for Web password cracking is for HTTP (Form) attempts. **** offers a number of features that accommodate whatever form we have, including the support of cookies and user-defined responses. Figure 15-8, shows ****'s simple interface for setting up an HTTP (Form) brute-force attempt.
Figure 15-8. **** and HTTP (form) settings
Now, using the "Learn From Settings" button, we let Brutus try to read the form we want to brute force and understand what it requires for authentication. Figure 15-9 shows the returned options and fields specific for the targeted form.
Figure 15-9. **** Form Viewer
The two fields in the form are "user" and "password." The back-end server program that processes the user and password to validate it is /cgi-bin/login.cgi. We accept these parameters and have ***** attempt passwords against the system, as shown in Figure 15-10.
Figure 15-10. **** and HTTP (form) results
****'s flexibility is robust and its feature set unrivaled. It will perform every major authentication attempt except NTLM. The only program we know that offers NTLM **** forcing is ****
***** is a multifeature Web password cracker. The program is written for ****** only but allows for a number of different types of authentication **** forcing, including:
· HTTP (Basic Authentication)
· HTTP (HTML Form/CGI)
· POP3 (Post Office Protocol v3)
· FTP (File Transfer Protocol)
· SMB (Server Message Block)
· Telnet
Although HTTP Basic is the most ubiquitous program on the Internet today, HTTP Form is close behind. To use ***** to ***** force a standard HTTP Basic page, we need only input the target in the Target field, select HTTP (Basic Authentication) in the Type field, and then select the type of Authentication Options (by default it will use the most common of usernames and passwords). Figure 15-5 shows how ***** can be set up to brute force known usernames and passwords.
Figure 15-5. **** ****** forcing an HTTP Basic connection
The Positive Authentication Results window shows that the administrator username and test username have been confirmed to have a blank password and the word "test," respectively.
However, if we have exhausted our list of usernames and passwords, we can allow **** to identify the password with its brute-force options. As shown in Figure 15-6, with these options we can select the size and composition of the password in an attempt to include the full ASCII keyspace or a customized range.
Figure 15-6. ****'s *****-force password options
Then when **** runs, which could take some time, it will attempt all the permutations of the set created. Figure 15-7 reveals that, with 0–6 length and lowercase alpha as the composition, the complete brute force will take about a month on a P4-1.2 GHz machine. Not quite the speed we were looking for, but the feature is robust.
Figure 15-7. ***, using the true ****-**** feature
But the real advantage of using *** for Web password cracking is for HTTP (Form) attempts. **** offers a number of features that accommodate whatever form we have, including the support of cookies and user-defined responses. Figure 15-8, shows ****'s simple interface for setting up an HTTP (Form) brute-force attempt.
Figure 15-8. **** and HTTP (form) settings
Now, using the "Learn From Settings" button, we let Brutus try to read the form we want to brute force and understand what it requires for authentication. Figure 15-9 shows the returned options and fields specific for the targeted form.
Figure 15-9. **** Form Viewer
The two fields in the form are "user" and "password." The back-end server program that processes the user and password to validate it is /cgi-bin/login.cgi. We accept these parameters and have ***** attempt passwords against the system, as shown in Figure 15-10.
Figure 15-10. **** and HTTP (form) results
****'s flexibility is robust and its feature set unrivaled. It will perform every major authentication attempt except NTLM. The only program we know that offers NTLM **** forcing is ****
12345 said:mehemai.....
first facebook login page ekak wage ekak create karanna one..full professional original widihata......then URL eka mask karala iwara.......facebook eke link ekak widihata enna danna one.....
eka full professional wena taramata wade saarthaka wenne .........
but 100% success wei kiyala kiyanna ba.but just giv it a try.....
2 wasare lamayek da oya????
12345 said:Copying was not success full.....
HEHE oka full coppy kala nam mun mawath ban karawii
12345 said:mehemai.....
first facebook login page ekak wage ekak create karanna one..full professional original widihata......then URL eka mask karala iwara.......facebook eke link ekak widihata enna danna one.....
eka full professional wena taramata wade saarthaka wenne .........
but 100% success wei kiyala kiyanna ba.but just giv it a try.....
therenne ne ban
hmm kk den!!keep the thread useful for others!12345 said:yes they can.....but as far as i kno...google cant discuss rite? it will just give what you search.but its better to discuss it with people....hope u understand it.
FUNasela said:
look bro im doing this subject just for fun......
i dont need to harm anyone or get anyones personal things...k
Similar threads
