An attack using every possible input to attempt to produce the correct output. Typically the method of last resort when no weakness allows the use of a more restricted input set. E.g. trying all possible (or likely) passwords, in an attempt to guess the correct one.

learn more… | top users | synonyms

1
vote
1answer
102 views

Distributed IMAP-Dictionary-Attack-Tool?

I have a client with a hacked IMAP-Account, and the attacker(s) made thousands of password-attempts, probably with a fixed set of passwords, from different IPs before they got in. After successful ...
1
vote
0answers
124 views

Hydra gives wrong passwords

I've been trying to use hydra (educational way) but with no success. The site method is http-post but performed by ajax (should it be a problem? I think not). After execute the command I got an output ...
1
vote
0answers
360 views

BruteForce on Hydra (Usernames or Password with Special-Chars), letter “Ñ”

I use Hydra with the Web-Form (Http-Post-Form); and I'm trying to use a list of Usernames when some of the nicks contain a letter ñ. For example I have the following account in my list: Username: ...
1
vote
0answers
2k views

Linux Hydra issue - random correct password success

I have an issue with Hydra when i use it. First let me inform that, i read multible guides, tries the excact same command lines as in guides directly supported by the Damn Vulnerable Web Application ...
0
votes
0answers
55 views

Brute-Force/Dictionary attack against encypted file using PBKDF2 key derivation

I have been following this very useful post by Thomas. My use case is slightly different. I am developing a mobile application which requires some sensitive data to be stored on the device in a SQLite ...
0
votes
0answers
30 views

Firewall best practice

I have to implement a firewall on a Mikrotik RouterBoard. What is a good way to do it? Here is my plan: Note: We are using an OpenVPN (bridge mode) server, a DHCP server, a PPPOE client, and an NTP ...
-2
votes
0answers
37 views

How vulnerable is Windows 7 to brute force attacks?

I researched a while back whether it would be feasible for a standard user to be able to brute force another account on Windows 7. I calculated that at 3,000 attempts per second, it would take 11 days ...