full-disclosure - Use of Brutus

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

From: chrisgsharp at yahoo.com (Chris Sharp)
Subject: Use of Brutus

Hi all,

I've been trying for some time now to use Brutus (BrutusA2.exe) to help with an internal review of the security of the user passwords for an application.  I'm having some trouble getting Brutus to work with form-based authentication and am hoping to find some additional information on how I can configure the .bad file.  Currently I'm getting false-positive results for the user ID's and Passwords being used.  Any help is appreciated.

Thanks,

Chris S.

---------------------------------
Do you Yahoo!?
Win a $20,000 Career Makeover at Yahoo! HotJobs 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20040505/67580d7b/attachment.html