babbacool
Dec 3 2003, 09:02 AM
Hello !
For those who are interested I've found this tool....
I don't know if it works because I don't have Linux installed on my computer...
I hope you'll enjoy....
TCT-Hydrasource :
http://www.thc.org/
I know Hydra. It's a good tool. It try brute-force login on many services, (telnet, ftp, http, ssh) but I think it only works by dictionnary, not real brute-force.
If you've got a user list, and a good disctionnary, it may help.
GhostCow
Dec 3 2003, 11:31 AM
what ways is there to get a user list?
Well... You could try some default accounts, like root, admin, exploit, oracle, http, apache, lp, guest, test and so on...
Account root/root may often exists you know... Stupid admins !!!
Hum.. Try also to connect to port 25 of the host (sendmail) and VRFY some accounts
hks-3207
Jan 24 2004, 01:06 AM
i use this list u can try out