Brutforces
A full search (or "brute force " method ) is a method of solving mathematical problems. Refers to a class of methods for finding solutions by exhausting all possible variants. The complexity of a complete search depends on the number of all possible solutions of the problem. If the solution space is very large, a full search can not yield results for several years or even centuries.
Any problem in the class NP can be solved by a complete listing. Moreover, even if the calculation of the objective function from each specific possible solution of the problem can be carried out in polynomial time, depending on the number of all possible solutions, a complete search may require an exponential running time.
In cryptography, on the computational complexity of a complete search, the evaluation of the cryptographic strength of ciphers is based. In particular, the cipher is considered crypto-resistant if there is no "hacking" method that is substantially faster than a full search of all keys. Cryptographic attacks, based on the method of full search, are the most universal, but also the longest.
In English, the term "brute-force", considered in this article, usually refers to the class of hacker attacks. In this case, a more general concept, the mathematical method of exhausting all possible variants for finding the solution of the problem, corresponds to the term "Proof by exhaustion".
So, I wanted to write something useful ...
In order to get the password to the site, of course without the help of credit cards
,we need
Program that will perform brute force, a list of logins and passwords, that is, a Word list or
Combo sheet, and to ensure anonymity and more for something - we need a list of anonymous
Proxy servers ... In order:
General principle of the program - the program takes the address of the members of the zone,
Then from the leaves of the sheet takes a combination of a login-password, forms a request from it, sends a request
Actually on the server, but does it through a proxy server, preferably anonymous ... Then the program
Receives the server's response and analyzes it ... The purpose of the program is to filter out for us those answers that
Match the correct combination of login-password and save them ... This is in the primitive ... As a rule
Similar programs have many additional functions that are used during work
(Changing proxy servers, performing specified actions on error, different autopilots, well, etc.)
And used in preparation (proxy checking, sorting of sheets of sheets, checking found
Passwords, etc.) ... The program, of course, can send many requests at once, which reduces
Time of sorting out a certain number of passwords, that is, your Word Word ... Simply put -
The task of the program to form queries, ensure their rapid sending, maintain the correctness
And the anonymity of these requests, track server responses and store the statistics we need ...
So that's all we needed to give the program: Word List, proxy list, address members of the zone.
Consider what it is and where to take it
-------------------------------------------------- -------------------------------------------------
Vord sheet is a text file in which there are variants of logins
And the corresponding passwords ... As a rule, programs for bruteforce use combo sheets, which
Contain the same data separated by a colon, for example:
Login
Assword
Admin: user
18277465: 9124659
[email protected] : 1937fl
and so on...
If you read from the left to the right All that before the colon is the login, all that after this is the password.
The colon is used only as a separator ...
Where do these sheets come from? They can be found in the section about bruteforce and scan-sheets, download on
Other sites, compose yourself, generate the appropriate programs ... General requirements for
Good Words Sheets: Sheets should not be too large, opinions vary, but on average this is from
1 to 10 thousand combinations (of course, if you do not intend to scan the site, for example, with a small amount
Members and alphabetically, there's really no getting around) ... The sheet should have real passwords, that is
This sheet should be made up of really used passwords to sites ... Of course they should
Be correctly composed (syntax), it is desirable not to have repetitions (at least the time of the search
Increases in this case) ... Sheets are desirable all the time to update, the productivity of the leaf is often
Falls with his "age" ... This is all at least, but in general from the sheet very much depends, for example
I had cases when one sheet of 30000 did not give passwords at all, and another sheet of 1000 gave
Dozens of passwords, so draw conclusions ... Let's consider, according to what signs are divided the Word lists:
Thematic sheets are sheets containing passwords only to sites of a certain subject, for example
Fetish ... What is it for and what does it give? The fact is that members, that is, users who have committed
A mistake in life and through his credit card bought access to the porn site. often
Gain access to several sites of interest to them, while the likelihood,
That they use the same combination of login-password is quite high ... Accordingly, having
The thematic Word of the page and using it for the scanning of the corresponding site we dramatically increase
Their chances of finding a password, or passwords ... Thematic sheets are usually smaller in size than regular ones,
While more productive, therefore it is highly recommended to collect, compile and
Use such sheets.
The sheets that meet the requirements of different billing are lists containing passwords that are composed
By rules imposed on the user by a certain payment system ... For example, a certain system
Requires that you use the e-mail address as your login and the digits in the password
At least 4 ... If we want to get a password for this site, that is, to the site on which
This billing is used, then it is more logical for us to scan just such sheets, otherwise we simply
We lose time and risk not to find anything, if for example it will be scanned by a sheet in which in the login
Just words are used, and not e-mail. Requirements for different billing were in school.
Sheets, separated by some special features - such as with a login in the form of an e-mail, or in the form
19375843: 1054706, or containing only names, for example, janet: janet, bill: bill, containing,
Such as the names of players or actors ... The options are mass, simply divided into different characteristic
Signs ... Why do you need this? For example, you scanned the site, and saw that among the passwords there are
Combinations name: name ... It will be logical to start a sheet with names, the chances of finding more passwords in it
The case is more than just scrapping a sheet, with different passwords and logins ...
Well, probably enough for now, since the sheets can be divided and sorted to infinity
How to compose effective word-lists? Good results are obtained by collecting passwords on the forum ...
The main reason for this - the passwords are fresh and almost all living, working, well, or were those
Most recently ... Collect thematic sheets on the forum - for example, a sheet in the section
Fetish-bdsm will give unequivocally the best sheet, than downloaded it is unclear from where ... It goes without saying that such
Sheets should be used for their intended purpose, that is, if it is fetish-bdsm then they need to be scanned
Such sites, and not, for example, on the topic amateurs ... It is useful to make sheets periodically
From the history of its program for bruteforce, if there is certainly something there ))
In general, you need to try to update the sheets more often, it's better to collect them yourself, pay attention
On which of the sheets you find more passwords, of which less ...
In any case, before you start to scan the site, you need to think about the password requirements,
What subject matter and whether you have a thematic sheet such ... What password can often be found out
Using, for example, search the forum or google to type the address of the members of the site zone and see
All pages containing this word (by the way and a live password can be found) ... The best option -
This is when you thought, checked the compliance of your sheet with the passwords that are on the site,
Took or compiled a thematic sheet, and if it is fresh and the site is not protected from bruteforce -
Your chances of finding the password are very high ...
-------------------------------------------------- -------------------------------------------------
List of proxy servers
Work through a proxy is necessary for many reasons ... To protect your loved one eg,
To preserve the survivability of the passwords found, because on some sites the password you have found
Will work only through the proxy, using which you found it, more precisely when you call from another
Proxy server or without it, the password will be blocked right away ... In order to defraud defensive
Server programs, as on many sites you will not be allowed to go through passwords from one
IP addresses ... In general, to work through a proxy is necessary, there are many reasons for this ... The essence of the proxy:
In short, we are mainly interested in the ability of a proxy to change your IP address ...
When connecting through a proxy server does not determine your IP, of course if the proxy is anonymous ...
The address is replaced by the IP of the proxy itself, or it is not determined at all ... There are many subtle moments,
For beginners it is important to know the basic parameters of the proxy. The level of anonymity is from 1 to 5 ...
It is recommended to use only a proxy with level 1 (highest) and up to level 3 ...
The rest just delete. Speed - well, everything is clear, like ... if you are not in a hurry,
Then do not pay attention, but if yes - remove the slow proxy ...
You can take proxy lists at school, section All about proxy and self-defense, or you can download from others
Sites ... You can also look for yourself, but it's not for beginners It is important to take a list of proxies,
After which you need to check it and filter out your server's unnecessary ... Check can be done,
For example, Access Diver'om ... The task to delete first not working proxy, then check for
Anonymity and remove the proxy with a low level of anonymity, well, save it to a file
And use ... You need to know that proxies have the property of dying, changing the level of anonymity,
Change the speed ... Check should be periodically, the fact of a single check after a few
Hours already nothing will not speak ... From the modest experience I know that using a proxy
1 and 2 levels, I almost every day to download a new list and check it ...
Routine of course, but otherwise it will not work ... More about the proxy can be read at school,
The beginner the main thing to understand, that it is necessary to use a proxy, it is necessary to check them constantly,
Update their list ...
The format of the proxy sheets is a text file, it contains the proxy address and the port that is written after the colon:
Example:
202.68.143.122:8080
12.158.182.250:80
202.57.70.27:80
213.180.5.123:80
66.17.4.9:80
204.231.238.122:8080
196.32.128.78:8080
193.255.207.252:8080
-------------------------------------------------- -------------------------------------------------
Address of the members of the zone
Here everything is simple - this is the page where the window for entering the login and password pops up ...
You can take it by going to the site and copying the shortcut (right click on the inscription members and
Selecting the copy shortcut) ... If the right button is locked, you can see the address below
In the browser, pointing the cursor to the appropriate link, or click on it and in the appeared
Window click "cancel", in this case in the address bar most often remains the url of the members of the zone ...
The school has ready lists of members of the zones of sites, you can take there ... The main thing to give the program
The correct address, otherwise it will swear and write that there is no such address, or such an address
Not protected by a password (this happens when for example the main page of the site has an inscription
Members, but when you click on it, you are redirected to another page, intermediate, and on it
There is another link to the real members of the site) ... There's nothing more to write about,
-------------------------------------------------- -------------------------------------------------
Some tips for beginners
At this stage it is understood that you have an installed Access Diver program,
The installation and configuration of which in the school written a lot and different, there is a list of proxies,
Which is checked and sorted, there are wizard (well or sheet) plus time, patience and
The desire to try the brute force in the business ... To begin with, some psychological aspects ...
It is required to understand that bruteforce takes time, sometimes not small time and, accordingly
Patience ... At the first attempts it is rather difficult to resist and not to stop the program
At the first 10.20 or I do not know how many minutes there (depending on the desire and patience)
Unsuccessful work ... In order not to be disappointed (mistakenly and unknowingly) in the brute force
Immediately, and be disappointed in it then, going to the next step, would advise to begin
With a simple ... Do not immediately grab the site, passwords are not on the forum, and you
You want to see ... Make conclusions, if there are none, then everything is not so simple there, and quite
It is possible that you will not be able to do anything at once ... In general it is necessary to start with a simple one, it is rather
Will give the result in the form of passwords, and that is not unimportant - it will dramatically increase your patience and
Confidence in the correctness of actions ... Where can I get this simple? Also everything is easily solved - be like
On the forum, look at which sites are post surfers, which sites have a lot of passwords from different surfers
And draw a conclusion that once the others are obtained, then why are you worse? Take these sites and try ...
At the very first attempts it is important to get at least some result, preferably not at a price
A lot of time ... If you're lucky, you can add the same posts where you took the address
(Only search do not forget to use, so as not to repeat) ...
There is another option, the school has, for example, the post of Tolstoy (emphasis on the first syllable, Tolstoy in the field
Brutforce is not an authority for us ))), Which lists the relatively simple sites, as well as
Word list ... It is quite possible to get a hundred passwords for the evening, I tried it myself, and only then go to
More serious sites.
In general, the main thing at the initial stage of correct actions is to prove to yourself that this
Works, gives a real result and is not too difficult, and develop further,
But not try, do not get anything, because of the wrong choice, turn it off
And to quit this business ... And passwords to good sites will not get anywhere from you, you need to wait a bit ...
It should be borne in mind that there are sites on which passwords are poured from Access Diver ...
If you see this - just see what the site is, it is possible that there are two or three dozen
Images, and the value of this site is only for its creator and the fact that it has
Links to other, normal sites ... It's all so cunningly conceived You do not need a dozen pictures,
Turn off immediately ... On such a site you can find 500 passwords, they are simply registered there, the most
So, there are so many And even more so do not post them, who needs it?
I'm inexperienced post it a couple of times, until now my conscience is torturing
-------------------------------------------------- -----------------------------------------------------
Probably enough for a start ... I can not describe the program for brute-force, at school everything is there,
And manuals, and tips, and video file, even on Access Diver ... There all is not so difficult, download, read,
And try ... But first read a little at school to do everything right and get the result,
But there goes by itself everything will go
All, I hope someone at least one of the written suggestions will help in the development of bruteforce
In order to get the password to the site, of course without the help of credit cards
,we need Program that will perform brute force, a list of logins and passwords, that is, a Word list or
Combo sheet, and to ensure anonymity and more for something - we need a list of anonymous
Proxy servers ... In order:
General principle of the program - the program takes the address of the members of the zone,
Then from the leaves of the sheet takes a combination of a login-password, forms a request from it, sends a request
Actually on the server, but does it through a proxy server, preferably anonymous ... Then the program
Receives the server's response and analyzes it ... The purpose of the program is to filter out for us those answers that
Match the correct combination of login-password and save them ... This is in the primitive ... As a rule
Similar programs have many additional functions that are used during work
(Changing proxy servers, performing specified actions on error, different autopilots, well, etc.)
And used in preparation (proxy checking, sorting of sheets of sheets, checking found
Passwords, etc.) ... The program, of course, can send many requests at once, which reduces
Time of sorting out a certain number of passwords, that is, your Word Word ... Simply put -
The task of the program to form queries, ensure their rapid sending, maintain the correctness
And the anonymity of these requests, track server responses and store the statistics we need ...
So that's all we needed to give the program: Word List, proxy list, address members of the zone.
Consider what it is and where to take it
-------------------------------------------------- -------------------------------------------------
Vord sheet is a text file in which there are variants of logins
And the corresponding passwords ... As a rule, programs for bruteforce use combo sheets, which
Contain the same data separated by a colon, for example:
Login
Assword Admin: user
18277465: 9124659
[email protected] : 1937fl
and so on...
If you read from the left to the right
All that before the colon is the login, all that after this is the password. The colon is used only as a separator ...
Where do these sheets come from? They can be found in the section about bruteforce and scan-sheets, download on
Other sites, compose yourself, generate the appropriate programs ... General requirements for
Good Words Sheets: Sheets should not be too large, opinions vary, but on average this is from
1 to 10 thousand combinations (of course, if you do not intend to scan the site, for example, with a small amount
Members and alphabetically, there's really no getting around) ... The sheet should have real passwords, that is
This sheet should be made up of really used passwords to sites ... Of course they should
Be correctly composed (syntax), it is desirable not to have repetitions (at least the time of the search
Increases in this case) ... Sheets are desirable all the time to update, the productivity of the leaf is often
Falls with his "age" ... This is all at least, but in general from the sheet very much depends, for example
I had cases when one sheet of 30000 did not give passwords at all, and another sheet of 1000 gave
Dozens of passwords, so draw conclusions ... Let's consider, according to what signs are divided the Word lists:
Thematic sheets are sheets containing passwords only to sites of a certain subject, for example
Fetish ... What is it for and what does it give? The fact is that members, that is, users who have committed
A mistake in life and through his credit card bought access to the porn site.
often Gain access to several sites of interest to them, while the likelihood,
That they use the same combination of login-password is quite high ... Accordingly, having
The thematic Word of the page and using it for the scanning of the corresponding site we dramatically increase
Their chances of finding a password, or passwords ... Thematic sheets are usually smaller in size than regular ones,
While more productive, therefore it is highly recommended to collect, compile and
Use such sheets.
The sheets that meet the requirements of different billing are lists containing passwords that are composed
By rules imposed on the user by a certain payment system ... For example, a certain system
Requires that you use the e-mail address as your login and the digits in the password
At least 4 ... If we want to get a password for this site, that is, to the site on which
This billing is used, then it is more logical for us to scan just such sheets, otherwise we simply
We lose time and risk not to find anything, if for example it will be scanned by a sheet in which in the login
Just words are used, and not e-mail. Requirements for different billing were in school.
Sheets, separated by some special features - such as with a login in the form of an e-mail, or in the form
19375843: 1054706, or containing only names, for example, janet: janet, bill: bill, containing,
Such as the names of players or actors ... The options are mass, simply divided into different characteristic
Signs ... Why do you need this? For example, you scanned the site, and saw that among the passwords there are
Combinations name: name ... It will be logical to start a sheet with names, the chances of finding more passwords in it
The case is more than just scrapping a sheet, with different passwords and logins ...
Well, probably enough for now, since the sheets can be divided and sorted to infinity
How to compose effective word-lists? Good results are obtained by collecting passwords on the forum ...
The main reason for this - the passwords are fresh and almost all living, working, well, or were those
Most recently ... Collect thematic sheets on the forum - for example, a sheet in the section
Fetish-bdsm will give unequivocally the best sheet, than downloaded it is unclear from where ... It goes without saying that such
Sheets should be used for their intended purpose, that is, if it is fetish-bdsm then they need to be scanned
Such sites, and not, for example, on the topic amateurs ... It is useful to make sheets periodically
From the history of its program for bruteforce, if there is certainly something there
)) In general, you need to try to update the sheets more often, it's better to collect them yourself, pay attention
On which of the sheets you find more passwords, of which less ...
In any case, before you start to scan the site, you need to think about the password requirements,
What subject matter and whether you have a thematic sheet such ... What password can often be found out
Using, for example, search the forum or google to type the address of the members of the site zone and see
All pages containing this word (by the way and a live password can be found) ... The best option -
This is when you thought, checked the compliance of your sheet with the passwords that are on the site,
Took or compiled a thematic sheet, and if it is fresh and the site is not protected from bruteforce -
Your chances of finding the password are very high ...
-------------------------------------------------- -------------------------------------------------
List of proxy servers
Work through a proxy is necessary for many reasons ... To protect your loved one
eg, To preserve the survivability of the passwords found, because on some sites the password you have found
Will work only through the proxy, using which you found it, more precisely when you call from another
Proxy server or without it, the password will be blocked right away ... In order to defraud defensive
Server programs, as on many sites you will not be allowed to go through passwords from one
IP addresses ... In general, to work through a proxy is necessary, there are many reasons for this ... The essence of the proxy:
In short, we are mainly interested in the ability of a proxy to change your IP address ...
When connecting through a proxy server does not determine your IP, of course if the proxy is anonymous ...
The address is replaced by the IP of the proxy itself, or it is not determined at all ... There are many subtle moments,
For beginners it is important to know the basic parameters of the proxy. The level of anonymity is from 1 to 5 ...
It is recommended to use only a proxy with level 1 (highest) and up to level 3 ...
The rest just delete. Speed - well, everything is clear, like ... if you are not in a hurry,
Then do not pay attention, but if yes - remove the slow proxy ...
You can take proxy lists at school, section All about proxy and self-defense, or you can download from others
Sites ... You can also look for yourself, but it's not for beginners
It is important to take a list of proxies, After which you need to check it and filter out your server's unnecessary ... Check can be done,
For example, Access Diver'om ... The task to delete first not working proxy, then check for
Anonymity and remove the proxy with a low level of anonymity, well, save it to a file
And use ... You need to know that proxies have the property of dying, changing the level of anonymity,
Change the speed ... Check should be periodically, the fact of a single check after a few
Hours already nothing will not speak ... From the modest experience I know that using a proxy
1 and 2 levels, I almost every day to download a new list and check it ...
Routine of course, but otherwise it will not work ... More about the proxy can be read at school,
The beginner the main thing to understand, that it is necessary to use a proxy, it is necessary to check them constantly,
Update their list ...
The format of the proxy sheets is a text file, it contains the proxy address and the port that is written after the colon:
Example:
202.68.143.122:8080
12.158.182.250:80
202.57.70.27:80
213.180.5.123:80
66.17.4.9:80
204.231.238.122:8080
196.32.128.78:8080
193.255.207.252:8080
-------------------------------------------------- -------------------------------------------------
Address of the members of the zone
Here everything is simple - this is the page where the window for entering the login and password pops up ...
You can take it by going to the site and copying the shortcut (right click on the inscription members and
Selecting the copy shortcut) ... If the right button is locked, you can see the address below
In the browser, pointing the cursor to the appropriate link, or click on it and in the appeared
Window click "cancel", in this case in the address bar most often remains the url of the members of the zone ...
The school has ready lists of members of the zones of sites, you can take there ... The main thing to give the program
The correct address, otherwise it will swear and write that there is no such address, or such an address
Not protected by a password (this happens when for example the main page of the site has an inscription
Members, but when you click on it, you are redirected to another page, intermediate, and on it
There is another link to the real members of the site) ... There's nothing more to write about,
-------------------------------------------------- -------------------------------------------------
Some tips for beginners
At this stage it is understood that you have an installed Access Diver program,
The installation and configuration of which in the school written a lot and different, there is a list of proxies,
Which is checked and sorted, there are wizard (well or sheet) plus time, patience and
The desire to try the brute force in the business ... To begin with, some psychological aspects ...
It is required to understand that bruteforce takes time, sometimes not small time and, accordingly
Patience ... At the first attempts it is rather difficult to resist and not to stop the program
At the first 10.20 or I do not know how many minutes there (depending on the desire and patience)
Unsuccessful work ... In order not to be disappointed (mistakenly and unknowingly) in the brute force
Immediately, and be disappointed in it then, going to the next step, would advise to begin
With a simple ... Do not immediately grab the site, passwords are not on the forum, and you
You want to see ... Make conclusions, if there are none, then everything is not so simple there, and quite
It is possible that you will not be able to do anything at once ... In general it is necessary to start with a simple one, it is rather
Will give the result in the form of passwords, and that is not unimportant - it will dramatically increase your patience and
Confidence in the correctness of actions ... Where can I get this simple? Also everything is easily solved - be like
On the forum, look at which sites are post surfers, which sites have a lot of passwords from different surfers
And draw a conclusion that once the others are obtained, then why are you worse? Take these sites and try ...
At the very first attempts it is important to get at least some result, preferably not at a price
A lot of time ... If you're lucky, you can add the same posts where you took the address
(Only search do not forget to use, so as not to repeat) ...
There is another option, the school has, for example, the post of Tolstoy (emphasis on the first syllable, Tolstoy in the field
Brutforce is not an authority for us
))), Which lists the relatively simple sites, as well as Word list ... It is quite possible to get a hundred passwords for the evening, I tried it myself, and only then go to
More serious sites.
In general, the main thing at the initial stage of correct actions is to prove to yourself that this
Works, gives a real result and is not too difficult, and develop further,
But not try, do not get anything, because of the wrong choice, turn it off
And to quit this business ... And passwords to good sites will not get anywhere from you, you need to wait a bit ...
It should be borne in mind that there are sites on which passwords are poured from Access Diver ...
If you see this - just see what the site is, it is possible that there are two or three dozen
Images, and the value of this site is only for its creator and the fact that it has
Links to other, normal sites ... It's all so cunningly conceived
You do not need a dozen pictures, Turn off immediately ... On such a site you can find 500 passwords, they are simply registered there, the most
So, there are so many
And even more so do not post them, who needs it? I'm inexperienced post it a couple of times, until now my conscience is torturing
-------------------------------------------------- -----------------------------------------------------
Probably enough for a start ... I can not describe the program for brute-force, at school everything is there,
And manuals, and tips, and video file, even on Access Diver ... There all is not so difficult, download, read,
And try ... But first read a little at school to do everything right and get the result,
But there goes by itself everything will go
All, I hope someone at least one of the written suggestions will help in the development of bruteforce
Comments
When commenting on, remember that the content and tone of your message can hurt the feelings of real people, show respect and tolerance to your interlocutors even if you do not share their opinion, your behavior in the conditions of freedom of expression and anonymity provided by the Internet, changes Not only virtual, but also the real world. All comments are hidden from the index, spam is controlled.