brutus

[ghostsmurf]

does any one know if brutus actually works?
and is there any other web password crackers out there that DO work?

[bubzuru]

webcracker 4.0

it works

http://www.megaupload.com/?d=ORVL0F2E

.http://members.asianpimp.deluxepass.com/ <<<hack this

[pseudo_opcode]

brutus DOES work..
you only need to know how to use it...
Look for some tutorials online..
another cracker is munga bunga http brute force...
search google for them
and be careful, download from a reliable site because most of them itself contain trojans...

[bad_brain]

well, such apps work in theory, but in practice it's a little different:
- many logins are limited to a max. amount of attempts
- brute forcing lights the IDS logs up like a christmas tree and if the pass is not something stupid like 1234 it'll take a LOOOONG time

so imo it's better to try such apps "for fun" in a LAN....

[DaveDaDon]

hmmm
bruteforcing isnt legal
why is this up here!!

[CommonStray]

because his question wasnt against the rules

plus bruteforcing would only be illegal when used against a machine/network that doesnt belong to you,or where you dont have permission...

[mrmike]

webcracker 4.0

it works

http://www.megaupload.com/?d=ORVL0F2E

.http://members.asianpimp.deluxepass.com/ <<<hack this

link is death.

[pseudo_opcode]

hmmm
bruteforcing isnt legal
why is this up here!!

No its not,
like CB said
i set up a server and wanna see if my IDS triggers when someone bruteforces, is that illegal?

i forgot my ms word document password.. it has critical data, i will have to brute force.. is that illegal?

a network admin wants me to secure his network, i can use brutus, is that illegal?

Its the purpose which makes something illegal, also bruteforcing is a method, a technique.. not a malicious codelet or something. Brutus CAN be considered as a security tool or can be part of any security analyst's toolkit, fake logins cant