Author | Post | |
unknown user |
I have read in the Tutorials that brute forcing means to *try all the possible combinations of password*. I was not cleared about this, why is there a limit in the number of times that you can input the passwords. How does this affect the server? I would appreciate a lot if someone go further into depth on this. |
|
24.07.2006 18:06:07 |
|
|
Grivier |
well term " brute- force" means that it it tries all possible solutions no matter the limit of letters. ( and numbers & symbols, whether you have selected it ) it doesn't only relies to attacking the server,you can bf crackits by inlinebf lines of code,also hashes like SHA1,MD5,RIPEMD160 etc.... it starts with it's minimal parameter ( word lenght ) and first letter in alphabet... words who have 8 or even 9 letters are still bruteforceable but not by all pc's... crucial thing is speed and memory of PC,if it's loaded with bunch of other crappy things it will take much more time to bf it hope it helped clear you few things about bf-ing if not, ask Grivier |
|
24.07.2006 18:15:30 |
|
|
unknown user |
It would help if you give an example! So guessing more than once isn't brute-forcing right? I'm just making sure. |
|
24.07.2006 18:20:48 |
|
|
Grivier |
example,hm....... ok let's say,in this thing if you try to input pass on server...let's say here on tbs, puting the solution if you have right pass it will give you rank-up instaniously,right? if you input few times, either means you have allmost right pass but one or more letters are wrong or either are missing... but if you make a prog that will try to do all the combinations that exist and doesn't even stop,that's bf-ing. before, there was a case that one user bf-ed 1 chall...he was kicked cos it spent too much of GB-ts...but he still didns found the solution even if pass was 5 letters long ( he probably didn't gave his bf prog a parameter for longiness of word, stupid of him ) so if you do some mistakes and retry few times ( 5,10, max 20 times ) it is not considered bf-ing PS: every time you try your so called " pass " it is logged by script. that log only admins can see... hope this cleared you few things Grivier |
|
24.07.2006 18:33:36 |
|
|
unknown user |
Ok, I understand now! Thanks for your time |
|
24.07.2006 18:40:37 |
|