Originally posted by interracialtoons
-
what you actulaly said was that a 6char passwd was better than an 8char passwd
For coding work - hit me up on andy // borkedcoder // com
(consider figuring out the email as test #1)
All models are wrong, but some are useful. George E.P. Box. p202 -
Originally posted by darksoulhaha, so you finnaly read what a rainbow table is
HAHAHA! I bet a million dollars you don't have a fucking rainbow table and you will have to wait 2 fucking years to build one.
Done.Comment
-
sure, but there are better ways to crack DESOriginally posted by borked
I was mainly pointing that bf is not as time expensive as it used to beComment
-
lets see the moneyOriginally posted by interracialtoonsHAHAHA! I bet a million dollars you don't have a fucking rainbow table and you will have to wait 2 fucking years to build one.Comment
-
ssuspect witness dont come OUTSIIIIDE...
BigCocks.com -
MatureWomen.com -
Tranny.com -
DrunkGirls.com -
TeenGirls.com -
MonsterCock.com and
many more... Click
here to see them all!Comment
-
no, i do agree. But like all, there are limitations.Originally posted by darksoul
Best to use blowfish as cipher anyways ;)
For coding work - hit me up on andy // borkedcoder // com
(consider figuring out the email as test #1)
All models are wrong, but some are useful. George E.P. Box. p202Comment
-
You'd be suprised how many people store password files in web accessible folders and have Options +Indexes in their httpd.confOriginally posted by borkedComment
-
Options +IndexesOriginally posted by ServerGenius
doesn't make .ht* files show.Comment
-
no but people who have this their password file is called htpasswdOriginally posted by darksoul
Comment
-
the standard is .htpasswd tho which is the most used.Originally posted by ServerGeniusno but people who have this their password file is called htpasswd
but yea, some are that stupid.Comment
-
Originally posted by borked
Will you stop with the random salts shit! It doesn't fucking matter.
Here's the code to brute force any three letter password no matter how is was created or whatever "salt":
$alphadata = "0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLM NOPQRSTUVWXYZ";
@one = split(//, $alphadata);
@two = @one;
@three = @one;
$a = 0;
foreach (@one) {
$b=0;
foreach(@two) {
$c = 0;
foreach (@three) {
$pw = "$one[$a]$two[$b]$three[$c]";
#### HTTP REQUEST LOGIN USING $pw;
#### IF RETURN CODE = 20 BAMM!!!!! I'M IN!!
$c++;}
$b++;}
$a++;}
Yeah, you can limit login tries to defeat it; but get off the random salt shit. That does fucking nothing.Done.Comment
-
Will you shut the fuck up and read the context of my post?Originally posted by interracialtoons
For coding work - hit me up on andy // borkedcoder // com
(consider figuring out the email as test #1)
All models are wrong, but some are useful. George E.P. Box. p202Comment
-
Yeah, but if you're smart like me you don't even use .htpassword.Originally posted by ServerGeniusno but people who have this their password file is called htpasswd
You can use any file in any directory to store passwords.
You tell htaccess where the file is in the .htacces file!
AuthUserFile /usr/home/Rootdirectory/8usdn2873hs772nas723a.txt
Stupid name in the root directory...not accessible to the web even if not password protected.Done.Comment
-
I know I wasn't talking about me. If you're smart like me you store user accounts into a db on a seperate server over local lan and use sessions toOriginally posted by interracialtoons
avoid lookups for every file that is loaded.
Comment
-
I will STFU if you will admit that I did as promissed!Originally posted by borked
I cracked a 3char encrypted password that was made with crypt(no matter the salt) in one fucking try!
--------------------------------
$passencrypted = "fill_it_in";
$alphadata = "0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLM NOPQRSTUVWXYZ";
@one = split(//, $alphadata);
@two = @one;
@three = @one;
$salt = substr($passencrypted, 0, 2);
print "salt = $salt<br>";
$a = 0;
foreach (@one) {
$b=0;
foreach(@two) {
$c = 0;
foreach (@three) {
$pw = "$one[$a]$two[$b]$three[$c]";
$check = crypt($pw, $salt);
if ($check eq $passencrypted) {print "$pw - is a possible password<br>"; exit;}
$c++;}
$b++;}
$a++;}
print "Ended OK";Done.Comment
-
genius!Originally posted by interracialtoons
and btw its more than 1 tryComment
-
Pulled from gooooooogleOriginally posted by borked
http://www.cs.wright.edu/~pmateti/In...etc-passwd.txt
Not a real password file, but google will allow you tp find stuff.
PHP-MySQL-Rails | ICQ: 342500546Comment
-
I just realized i posted the passwd file lolOriginally posted by mrkris
PHP-MySQL-Rails | ICQ: 342500546Comment
-
No...it took me one try to write the script and get the result needed to login.Originally posted by darksoulDone.Comment
-
ICQ me you cock loving thunder cuntOriginally posted by interracialtoons
PHP-MySQL-Rails | ICQ: 342500546Comment
-
Why don't you post your address so I can come over and put my foot up your ass and my fist down your throat.Originally posted by mrkrisDone.Comment
-
Hmmmm... better yet...whay don't I hack your password and post under your name.
Go ahead and challege me to do it....BITCH!Done.Comment
-
Wasn't using that to talk shit but if you want to be a crybaby keyboard warrior so be it.Originally posted by interracialtoons
PHP-MySQL-Rails | ICQ: 342500546Comment
-
"I DARE YOU TO CHALLENGE ME". Please, crack my gfy password, violate a law. You're probably the same stupid kiddy that runs around throwing out words such as "Heap Overflow" and "NOP Slides". I WILL HAX YUR INTERWEBOriginally posted by interracialtoons
PHP-MySQL-Rails | ICQ: 342500546Comment
-
-
roflmao ...Originally posted by toonpornblog
PHP-MySQL-Rails | ICQ: 342500546Comment
-
I know I'm beating a dead horse, here... but is this like the first time you've seen crypt(), I mean, ever? DES is only significant to EIGHT bytes, and that's all that is guaranteed. Period.
Not to mention your proposed salt is either static, or the password itself. It doesn't work that way. Ya might want to look into ROT13. Now that will take any sized string, man.. and DAMN is it fast!Comment
-
He's to busy cracking our passwords with retardo scripts from packetstormsecurity.nl to reply, so yes, beating a dead horseOriginally posted by toonpornblog
PHP-MySQL-Rails | ICQ: 342500546Comment
-
What I'd really like to know is why you bother with
when$alphadata = "0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHI JKLM NOPQRSTUVWXYZ";
@one = split(//, $alphadata);
@two = @one;
@three = @one;
gets you the same thing. Then you needlessly copy the array to @two & @three... why?@one = (A..Z, a..z, 0..9);
would accomplish the same thing as$pw = "$one[$a]$one[$b]$one[$c]";
I just fool around with perl in my free time and even I can see you're a total novice.$pw = "$one[$a]$two[$b]$three[$c]";Comment
-
Because I wanted a stupid MoFo like you to understand it.Originally posted by AgentCash
I wasn't trying to write "secret code" to baffle webmasters who don't even write scripts. How would that illustrate anything to them?
BTW: It's really fucking lame to take a solution that you could never have done yourself and then spend 24 hours since it was posted trying to pick at it.
why didn't you post a solution yesterday and end this thread?... Because you couldn't.
Stop acting like a jealous fagot. It will not make you a better webmaster.
Now I'm done. Gotta go do something more productive than listening to stupid shit.Done.Comment
-
Comment
AIM: GrouchyGfy
Comment