Brutus(The Remote Password Cracker)
Virus scan(Not fakes!)
Virus scan for Brutus
Jotti'sBrutus virus scan
Introduction(I did not made this. I do not have any credit and yes i copy and pasted it because 175,000+ people knows this tool it's not really alot of people so i am sharing here!)
Brutus is one of the fastest, most flexible remote password crackers you can get your hands on - it's also free. It is available for Windows 9x, NT and 2000, there is no UN*X version available although it is a possibility at some point in the future. Brutus was first made publicly available in October 1998 and since that time there have been at least 70,000 downloads and over 175,000 visitors to this page. Development continues so new releases will be available in the near future. Brutus was written originally to help me check routers etc. for default and common passwords
Features
Brutus version AET2 is the current release and includes the following authentication types :
HTTP (Basic Authentication)
HTTP (HTML Form/CGI)
POP3
FTP
SMB
Telnet
Other types such as IMAP, NNTP, NetBus etc are freely downloadable from this site and simply imported into your copy of Brutus. You can create your own types or use other peoples.
The current release includes the following functionality :
Multi-stage authentication engine
60 simultaneous target connections
No username, single username and multiple username modes
Password list, combo (user/password) list and configurable brute force modes
Highly customisable authentication sequences
Load and resume position
Import and Export custom authentication types as BAD files seamlessly
SOCKS proxy support for all authentication types
User and password list generation and manipulation functionality
HTML Form interpretation for HTML Form/CGI authentication types
Error handling and recovery capability inc. resume after crash/failure.
Developments:
Brutus is continually in development so functionality is always being added and enhanced
System Requirements
Windows 95, Windows 98, Windows NT 4 or Windows 2000. 24 Mb RAM, 5Mb HDD space. TCP/IP network connection.
FAQ
What is Brutus?
Many people refer to Brutus as a remote on-line password cracker, this is fairly accurate and I suppose it just about sums Brutus up.
What does it do?
Being a remote online password cracker, Brutus tends to crack passwords remotely, in an online fashion.
is there any other software like Brutus?
There are more tools now than there were when Brutus was originally released, some tools of note include :
Is there any other software like Brutus?
There are more tools now than there were when Brutus was originally released, some tools of note include :
wwwhack - Offering HTTP, POP3 & FTP - generally nice and easy to use.
There are others too, go with whatever suits you (sir.)
What is a BAD file?
That's a Brutus Application Definition file! These are small files that contain configuration information for Brutus, usually for a particular authentication type/device. Brutus can import and export BAD files so you can install new authentication types (applications) into Brutus or you can create new custom authentication types and export them for others to use.
What is a BRU file?
That's a Brutus Restore file. These file hold a saved session and can be loaded into Brutus to facilitate resuming previous attack sessions.
HooBieNet Official site:Brutus-The Remote Password Cracker(Please give full credit to them)
Approve List:
Psychotic
Please read this:Normal website port is 21.This toll is unable to be detected. It's super hard to be detected.
Copyright © 1997,1998,1999,2000,2001 HooBie Inc.
Logo:
HooBieNet Description:
"If you don't 0wn the master, the master 0wns you"
Virus scan for Brutus
Jotti'sBrutus virus scan
Introduction(I did not made this. I do not have any credit and yes i copy and pasted it because 175,000+ people knows this tool it's not really alot of people so i am sharing here!)
Brutus is one of the fastest, most flexible remote password crackers you can get your hands on - it's also free. It is available for Windows 9x, NT and 2000, there is no UN*X version available although it is a possibility at some point in the future. Brutus was first made publicly available in October 1998 and since that time there have been at least 70,000 downloads and over 175,000 visitors to this page. Development continues so new releases will be available in the near future. Brutus was written originally to help me check routers etc. for default and common passwords
Features
Brutus version AET2 is the current release and includes the following authentication types :
HTTP (Basic Authentication)
HTTP (HTML Form/CGI)
POP3
FTP
SMB
Telnet
Other types such as IMAP, NNTP, NetBus etc are freely downloadable from this site and simply imported into your copy of Brutus. You can create your own types or use other peoples.
The current release includes the following functionality :
Multi-stage authentication engine
60 simultaneous target connections
No username, single username and multiple username modes
Password list, combo (user/password) list and configurable brute force modes
Highly customisable authentication sequences
Load and resume position
Import and Export custom authentication types as BAD files seamlessly
SOCKS proxy support for all authentication types
User and password list generation and manipulation functionality
HTML Form interpretation for HTML Form/CGI authentication types
Error handling and recovery capability inc. resume after crash/failure.
Developments:
Brutus is continually in development so functionality is always being added and enhanced
System Requirements
Windows 95, Windows 98, Windows NT 4 or Windows 2000. 24 Mb RAM, 5Mb HDD space. TCP/IP network connection.
FAQ
What is Brutus?
Many people refer to Brutus as a remote on-line password cracker, this is fairly accurate and I suppose it just about sums Brutus up.
What does it do?
Being a remote online password cracker, Brutus tends to crack passwords remotely, in an online fashion.
is there any other software like Brutus?
There are more tools now than there were when Brutus was originally released, some tools of note include :
Is there any other software like Brutus?
There are more tools now than there were when Brutus was originally released, some tools of note include :
wwwhack - Offering HTTP, POP3 & FTP - generally nice and easy to use.
There are others too, go with whatever suits you (sir.)
What is a BAD file?
That's a Brutus Application Definition file! These are small files that contain configuration information for Brutus, usually for a particular authentication type/device. Brutus can import and export BAD files so you can install new authentication types (applications) into Brutus or you can create new custom authentication types and export them for others to use.
Bad files
Download these files and use File>Import service from the Brutus main form to import them. Alternatively just drop them in your Brutus directory and they will automagically be imported into Brutus upon startup. If You have any BAD files you would like to share then send them to me and I'll stick them here.*
NetBus-This is the BAD file for cracking NetBus authentication.
Example Su-Root-This is an example BAD file showing how to attack the root password from an existing user account using the 'su' command within a telnet session. You will need to change the unprivledged username and password in the pre-authentication sequence.
CiscoConsole-This is a BAD file for attacking the console password on a Cisco router, it should work with any Cisco that uses the default prompts. Most Cisco routers do NOT like multiple telnet connections (you can do 2 on a good day.)
Cisco-Enable-This is a BAD file for attacking the console enable password on a Cisco router, it should work with any Cisco that uses the default prompts. Since this particular type will maintain telnet connections to the target router you should be able to do 3 connections at a time. Using 3 connections I generally achieve 60-65 attempts per second, on a dial-up you should still be able to get 50 attempts per second. NOTE : The cisco console password is set to 'cisco' in this BAD file, change it as necessary.
Shiva LANRover (console)-This is a BAD file for username/passwords on a Shiva LANRover access server. These are common in many organisations that offer remote dial-in access. I have only tried this BAD file a few times but it works great.
NNTP (News Servers)-This is a BAD file for attacking the authentication scheme used in NNTP servers (e.g. U***** servers), it is not yet tested but should work OK.
SMTP VeRiFY Users-Mmmm, why not? Saw a little skript on packetstorm to trawl through a user list attempting to identify valid users using an SMTP server. This BAD file allows Brutus to do this. Just point it at the target SMTP server and load your user list into the password file. This uses the SMTP VRFY command which should be disabled on the target but often is not.*
SMTP ReCiPienT Users-As above except that this uses the SMTP RCPT command which is used to specify the mail recipient. You may need to modify the authentication sequence by adding '@whatever.com' in the password post-fix slot.
NetBus-This is the BAD file for cracking NetBus authentication.
Example Su-Root-This is an example BAD file showing how to attack the root password from an existing user account using the 'su' command within a telnet session. You will need to change the unprivledged username and password in the pre-authentication sequence.
CiscoConsole-This is a BAD file for attacking the console password on a Cisco router, it should work with any Cisco that uses the default prompts. Most Cisco routers do NOT like multiple telnet connections (you can do 2 on a good day.)
Cisco-Enable-This is a BAD file for attacking the console enable password on a Cisco router, it should work with any Cisco that uses the default prompts. Since this particular type will maintain telnet connections to the target router you should be able to do 3 connections at a time. Using 3 connections I generally achieve 60-65 attempts per second, on a dial-up you should still be able to get 50 attempts per second. NOTE : The cisco console password is set to 'cisco' in this BAD file, change it as necessary.
Shiva LANRover (console)-This is a BAD file for username/passwords on a Shiva LANRover access server. These are common in many organisations that offer remote dial-in access. I have only tried this BAD file a few times but it works great.
NNTP (News Servers)-This is a BAD file for attacking the authentication scheme used in NNTP servers (e.g. U***** servers), it is not yet tested but should work OK.
SMTP VeRiFY Users-Mmmm, why not? Saw a little skript on packetstorm to trawl through a user list attempting to identify valid users using an SMTP server. This BAD file allows Brutus to do this. Just point it at the target SMTP server and load your user list into the password file. This uses the SMTP VRFY command which should be disabled on the target but often is not.*
SMTP ReCiPienT Users-As above except that this uses the SMTP RCPT command which is used to specify the mail recipient. You may need to modify the authentication sequence by adding '@whatever.com' in the password post-fix slot.
What is a BRU file?
That's a Brutus Restore file. These file hold a saved session and can be loaded into Brutus to facilitate resuming previous attack sessions.
HooBieNet Official site:Brutus-The Remote Password Cracker(Please give full credit to them)
Approve List:
Psychotic
Please read this:Normal website port is 21.This toll is unable to be detected. It's super hard to be detected.
Copyright © 1997,1998,1999,2000,2001 HooBie Inc.
Logo:
HooBieNet Description:
"If you don't 0wn the master, the master 0wns you"
Originally Posted by Azazel-
