5 replies to this topic

[loxaXcracker]

Hello im new in this forum and i must say i really like here!

I have a question, how do I refer one application that i made that lets say has a text box named "passwd" and a button which is named "Valitade" and in the source we make it compare the users input with the password like this:

Dim password as string 
password = "pass"
If passwd.text = password then
msgbox("Valid!") 
else
msgbox("Invalid!")
end if

And then I make another application which will try and brute force the passwd.text and try any possible combination like "a" "aa" "aaa" "aaaa" "aaab" etc.
So i guess i will have to somehow open the application that i want to brute force in the bruteforcer that i made. So one way is to open it with the shell () command or maybe i can refer the program from the "References" tab and then somehow brute force. Anyway, if anyone can help I would really apreciate.

Thank you in advance! ^^

[SuRGeoN]

The best way is to try to crack the application and not brute forcing. You can do it with hex editors and win32dasm/ollydbg etc...

The answer to your question is that you can program an application that it will send keys ... with sendkeys function in VB.
so you can read a wordlist or whatever and sendkeys <word> + enter ... until you will get in. You can also use api if you need to read for example
the answer in the messagebox.

[loxaXcracker]

Thank you for the advice but i know how to crack an application, I got expirience with many methods but this one.... i couldn't find any vurnerability and my only chance to crack it is with brute forcing, and I am sure that i can success as i have this information that the password is a normal word. I really apreciate your help but i would prefer to see an example, so maybe someone can explain it a bit better with an example so that i could understand?

ps. I believe he somehow encrypted the password and thats the reason i can't find anything.
pps. Also i found in its source while searching with IDA pro an MD5 hash and tried 4 Giant word lists and run it through brute force for 2 hours but i didn't get any answer. I believe that the objective of this application is to learn how to brute force and that it is made in that way so no decompiler/deassembler would be able to find the password.

[loxaXcracker]

Or how about if i make it command line like this:

Dim password As String = "loxa"
Dim inp As String
system.console.write("Write the password:")
inp = System.Console.In.ReadLine
If inp = password Then
console.write = "Valid"
Console.ReadKey()
Else
console.write = "Invalid"
End If
In command line it is supposed to be easier because i already tried to crack it with a bruteforcer that my friend wrote in java and it worked. I just want to know how can i make it to refer to the app then open it and then write to it some words (at least a dictionary attack).
please someone reply

[Kaiba]

this is an example to use send keys with a timer
I hope it helps
SendKeys.zip
U can open the program then try a specified word from your database.
for more refer to www.planetsourcecode.com

[qazwsx]

you can also look into autoit, a windows autimation tool, to attempt to brute force the password. Autoit makes finding control handles easy.