full-disclosure - Use of Brutus

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: keydet89 at yahoo.com (Harlan Carvey)
Subject: Use of Brutus

Chris,

Just out of curiosity, what did the author say when
you contacted him about this issue?


--- Chris Sharp <chrisgsharp@...oo.com> wrote:
> Hi all,
>  
> I've been trying for some time now to use Brutus
> (BrutusA2.exe) to help with an internal review of
> the security of the user passwords for an
> application.  I'm having some trouble getting Brutus
> to work with form-based authentication and am hoping
> to find some additional information on how I can
> configure the .bad file.  Currently I'm getting
> false-positive results for the user ID's and
> Passwords being used.  Any help is appreciated.
>  
> Thanks,
>  
> Chris S.
> 
> 		
> ---------------------------------
> Do you Yahoo!?
> Win a $20,000 Career Makeover at Yahoo! HotJobs