New answers tagged brute-force
Regarding your filezilla/pagaent question: the short answer is yes, that is normal. I would call it an unintended side-effect. Based on my experience if you use putty, setup the private key there (Connection, SSH, Auth), & save the session that will be stored in the registry. If you name the 'Site' in filezilla the same as you did the session in putty, ...
Shouldn't "/abcdefg/:pass=^PASS^:incorrect password" be set to "/:usr=^USER^&pass=^PASS^:incorrect password" to match your form action as <form action="./" and username input as <input type="text" name="usr">?
In addition to what's already mentioned here, the wordlists are used in conjunction with some of the web app tools and things such as sqlmap. If you're looking for places to use them, download some of the "boot to root" VMs like Kioptrix and De-ICE and have a go at brute-ing some passwords. As for specific lists for specific types of hacks - not really. ...
Kali linux is a distribution designed for penetration testing and computer forensics, both which involve password cracking. So you are right in thinking that word lists are involved in password cracking, however it's not brute force. Brute force attacks try every combination of characters in order to find a password, while word lists are used in dictionary ...
Those lists can be used to feed into several programs. So for instance aircrack-ng has an option -w where it takes a wordlist as argument. The password testing program John the Ripper also takes wordlists to accelerate the guessing.
Top 50 recent answers are included