Prevent brute force attempts on your members section - GoFuckYourself.com

Juggernaut · 03-17-2003, 02:56 PM

http://www.cafecounterintelligence.c...p?articleid=23

This security script (PHP), should prevent any connections to your pages from any brute force programs. Also helps prevent flooding/DOS attacks, and other such things.

I'm sure that nothing is a perfect defence, but have a look at it, you may find it useful. I do suggest you have someone who knows about PHP to install this script, there are functions you may want to disable.

goBigtime · 03-17-2003, 02:58 PM

So will this one...

http://www.paysitepowertools.com/os-memlogin.html

Juggernaut · 03-17-2003, 02:58 PM

Quote:

Originally posted by goBigtime
So will this one...

http://www.paysitepowertools.com/os-memlogin.html

The CCI one, is free.

NoCarrier · 03-17-2003, 03:01 PM

Quote:

Originally posted by Juggernaut
http://www.cafecounterintelligence....hp?articleid=23

This security script (PHP), should prevent any connections to your pages from any brute force programs. Also helps prevent flooding/DOS attacks, and other such things.

I'm sure that nothing is a perfect defence, but have a look at it, you may find it useful. I do suggest you have someone who knows about PHP to install this script, there are functions you may want to disable.

Can you fix the url, it's not working. Thanks.

Juggernaut · 03-17-2003, 03:03 PM

Quote:

Originally posted by NoCarrier
Can you fix the url, it's not working. Thanks.

Done, I think it chewed it up when I hit the preview button...

goBigtime · 03-17-2003, 03:18 PM

Not much info there on it... will it protect against real-world bruteforce attacks? Ie large proxy based bruteforce attacks?

Theres a lot of scripts/modules out there that say they prevent brute force attacks -- and they do, so long as the attack is using the same ip, or using the same proxy more than a few times to scan passwords.

Ours is more a "wtf is going on here?!" bruteforce deterrant

It'll prevent all bruteforce attempts if used properly.

Juggernaut · 03-17-2003, 03:24 PM

I used an old version of this script, and it worked. It's a 14k zip file to download, how about reading the text files included, it has information in it. I didn't write the script.

defresto · 03-17-2003, 03:52 PM

I wouldn't trust free programms that much...
It doesn't meen that expencive solutions always are that money worth but security leaks could be too expencive to just fuck about... I would better write it inside the company (if you have good programmers) or hire some to provide you with consulting at least.

galleryseek · 03-17-2003, 03:54 PM

stopthathacker ::cough:: my design...

their site can be reached at: www.stopthathacker.com

03-17-2003, 02:56 PM	#1
Juggernaut Confirmed User Join Date: Jan 2003 Location: Brisbane, Australia Posts: 753	Prevent brute force attempts on your members section http://www.cafecounterintelligence.c...p?articleid=23 This security script (PHP), should prevent any connections to your pages from any brute force programs. Also helps prevent flooding/DOS attacks, and other such things. I'm sure that nothing is a perfect defence, but have a look at it, you may find it useful. I do suggest you have someone who knows about PHP to install this script, there are functions you may want to disable. Last edited by Juggernaut; 03-17-2003 at 03:03 PM..

03-17-2003, 02:58 PM	#2
goBigtime Confirmed User Join Date: Nov 2002 Posts: 7,761	So will this one... http://www.paysitepowertools.com/os-memlogin.html

03-17-2003, 03:18 PM	#6
goBigtime Confirmed User Join Date: Nov 2002 Posts: 7,761	Not much info there on it... will it protect against real-world bruteforce attacks? Ie large proxy based bruteforce attacks? Theres a lot of scripts/modules out there that say they prevent brute force attacks -- and they do, so long as the attack is using the same ip, or using the same proxy more than a few times to scan passwords. Ours is more a "wtf is going on here?!" bruteforce deterrant It'll prevent all bruteforce attempts if used properly.

03-17-2003, 03:24 PM	#7
Juggernaut Confirmed User Join Date: Jan 2003 Location: Brisbane, Australia Posts: 753	I used an old version of this script, and it worked. It's a 14k zip file to download, how about reading the text files included, it has information in it. I didn't write the script.

03-17-2003, 03:52 PM	#8
defresto Confirmed User Join Date: Mar 2003 Posts: 317	I wouldn't trust free programms that much... It doesn't meen that expencive solutions always are that money worth but security leaks could be too expencive to just fuck about... I would better write it inside the company (if you have good programmers) or hire some to provide you with consulting at least.

03-17-2003, 03:54 PM	#9
galleryseek Confirmed User Industry Role: Join Date: Mar 2002 Posts: 8,234	stopthathacker ::cough:: my design... their site can be reached at: www.stopthathacker.com