pen-test
[Top] [All Lists]

Re: Tutorial for brute forcing Web apps,

To: IRM <irm@iinet.net.au>
Subject: Re: Tutorial for brute forcing Web apps,
From: Christine Kronberg <seeker@shalla.de>
Date: Thu, 16 Nov 2006 13:32:14 +0100 (CET)
Cc: pen-test@securityfocus.com
Delivered-to: sp-com-lists@consult.net
Delivered-to: pentest-list2@consult.net
Delivered-to: mailing list pen-test@securityfocus.com
Delivered-to: moderator for pen-test@securityfocus.com
In-reply-to: <000101c7089c$2a9fe1f0$0200a8c0@head.kemanggisan.com>
List-help: <mailto:pen-test-help@securityfocus.com>
List-id: <pen-test.list-id.securityfocus.com>
List-post: <mailto:pen-test@securityfocus.com>
List-subscribe: <mailto:pen-test-subscribe@securityfocus.com>
List-unsubscribe: <mailto:pen-test-unsubscribe@securityfocus.com>
Mailing-list: contact pen-test-help@securityfocus.com; run by ezmlm
References: <000101c7089c$2a9fe1f0$0200a8c0@head.kemanggisan.com>
Resent-date: Thu, 16 Nov 2006 15:46:54 -0700 (MST)
Resent-from: pen-test-return-1078482992@securityfocus.com
Resent-message-id: <20061116224654.882862372ED@outgoing3.securityfocus.com>
Resent-sender: listbounce@securityfocus.com
Sender: listbounce@securityfocus.com
On Wed, 15 Nov 2006, IRM wrote:

I am looking for tutorial on how to Brute forcing the Web apps -
especially when the Username and Password are on the form. I tried a
couple tools like C-Force but I had no luck on getting it running. So I
was wondering if possible to get on tutorial on how to use the tool or
perhaps maybe if you could suggest me the tool that is commonly use for
brute forcing the web apps.

  Hydra does the job quite nicely:
  -> http://www.thc.org/thc-hydra/

  Cheers,

  Chris Kronberg.

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------


<Prev in Thread] Current Thread [Next in Thread>