{"id":409,"date":"2013-06-27T04:08:24","date_gmt":"2013-06-27T04:08:24","guid":{"rendered":"http:\/\/www.gironsec.com\/blog\/?p=409"},"modified":"2013-06-27T04:08:24","modified_gmt":"2013-06-27T04:08:24","slug":"brute-forcer-progress-has-been-made","status":"publish","type":"post","link":"https:\/\/www.gironsec.com\/blog\/2013\/06\/brute-forcer-progress-has-been-made\/","title":{"rendered":"Brute forcer progress has been made!"},"content":{"rendered":"<p>Hello people!<\/p>\n<p>Long time, no update. I am sorry for that. I&#8217;ve been working at my new job and have been focusing my time on video games and women. The bane of all procrastination. <\/p>\n<p>I&#8217;ve been hammering away at my brutus app every time I get the chance. With the basic auth stub out of the way, the next step is to finish the site mode stub. And here it is:<br \/>\n<a href=\"http:\/\/www.gironsec.com\/blog\/wp-content\/uploads\/2013\/06\/sitemodebruter.png\"><img decoding=\"async\" loading=\"lazy\" src=\"http:\/\/www.gironsec.com\/blog\/wp-content\/uploads\/2013\/06\/sitemodebruter.png\" alt=\"sitemodebruter\" width=\"474\" height=\"553\" class=\"alignnone size-full wp-image-448\" srcset=\"https:\/\/www.gironsec.com\/blog\/wp-content\/uploads\/2013\/06\/sitemodebruter.png 474w, https:\/\/www.gironsec.com\/blog\/wp-content\/uploads\/2013\/06\/sitemodebruter-257x300.png 257w\" sizes=\"(max-width: 474px) 100vw, 474px\" \/><\/a><\/p>\n<p>I&#8217;ve also finished the FTP stub and am mostly done with the mail stub.<br \/>\n<a href=\"http:\/\/www.gironsec.com\/blog\/wp-content\/uploads\/2013\/06\/ftp-bruter.png\"><img decoding=\"async\" loading=\"lazy\" src=\"http:\/\/www.gironsec.com\/blog\/wp-content\/uploads\/2013\/06\/ftp-bruter.png\" alt=\"ftp bruter\" width=\"362\" height=\"566\" class=\"alignnone size-full wp-image-447\" srcset=\"https:\/\/www.gironsec.com\/blog\/wp-content\/uploads\/2013\/06\/ftp-bruter.png 362w, https:\/\/www.gironsec.com\/blog\/wp-content\/uploads\/2013\/06\/ftp-bruter-191x300.png 191w\" sizes=\"(max-width: 362px) 100vw, 362px\" \/><\/a><br \/>\n&#038;<br \/>\n<a href=\"http:\/\/www.gironsec.com\/blog\/wp-content\/uploads\/2013\/06\/mailbruter.png\"><img decoding=\"async\" loading=\"lazy\" src=\"http:\/\/www.gironsec.com\/blog\/wp-content\/uploads\/2013\/06\/mailbruter.png\" alt=\"mailbruter\" width=\"354\" height=\"466\" class=\"alignnone size-full wp-image-449\" srcset=\"https:\/\/www.gironsec.com\/blog\/wp-content\/uploads\/2013\/06\/mailbruter.png 354w, https:\/\/www.gironsec.com\/blog\/wp-content\/uploads\/2013\/06\/mailbruter-227x300.png 227w\" sizes=\"(max-width: 354px) 100vw, 354px\" \/><\/a><\/p>\n<p>I&#8217;d like to thank Andrew Wilson (Kuzushi) for the idea of significantly improving the speed of each of my brute forcers by using chunking.<\/p>\n<p><!-- HTML generated using hilite.me --><\/p>\n<div style=\"background: #ffffff; overflow:auto;width:auto;border:solid gray;border-width:.1em .1em .1em .8em;padding:.2em .6em;\">\n<pre style=\"margin: 0; line-height: 125%\"><span style=\"color: #008800; font-weight: bold\">static<\/span> <span style=\"color: #008800; font-weight: bold\">class<\/span> <span style=\"color: #BB0066; font-weight: bold\">Extensions<\/span>\r\n    {\r\n        <span style=\"color: #008800; font-weight: bold\">public<\/span> <span style=\"color: #008800; font-weight: bold\">static<\/span> IEnumerable&lt;IEnumerable&lt;T&gt;&gt; Chunk&lt;T&gt;(<span style=\"color: #008800; font-weight: bold\">this<\/span> IEnumerable&lt;T&gt; list, <span style=\"color: #333399; font-weight: bold\">int<\/span> chunkSize)\r\n        {\r\n            <span style=\"color: #333399; font-weight: bold\">int<\/span> i = <span style=\"color: #6600EE; font-weight: bold\">0<\/span>;\r\n            <span style=\"color: #333399; font-weight: bold\">var<\/span> chunks = <span style=\"color: #008800; font-weight: bold\">from<\/span> name <span style=\"color: #008800; font-weight: bold\">in<\/span> list\r\n                         <span style=\"color: #008800; font-weight: bold\">group<\/span> name by i++ \/ chunkSize <span style=\"color: #008800; font-weight: bold\">into<\/span> part\r\n                         <span style=\"color: #008800; font-weight: bold\">select<\/span> part.AsEnumerable();\r\n            <span style=\"color: #008800; font-weight: bold\">return<\/span> chunks;\r\n        }\r\n    }\r\n<\/pre>\n<\/div>\n<p>By breaking up the word list into chunks based on the number of threads I dynamically spawn, there are no collisions and each thread gets its own word list to attack with. Genius. <\/p>\n<p>All that is left now is the experimental web services brute forcer, and maybe snmp or something like that. I haven&#8217;t decided. <\/p>\n<p>You can download each one here in my <a href=\"http:\/\/www.gironsec.com\/code\/\">code section<\/a>.<br \/>\nHappy hacking!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hello people! Long time, no update. I am sorry for that. I&#8217;ve been working at my new job and have been focusing my time on video games and women. The bane of all procrastination. I&#8217;ve been hammering away at my brutus app every time I get the chance. With the basic auth stub out of [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[4,5,6],"tags":[],"_links":{"self":[{"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/posts\/409"}],"collection":[{"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/comments?post=409"}],"version-history":[{"count":3,"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/posts\/409\/revisions"}],"predecessor-version":[{"id":450,"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/posts\/409\/revisions\/450"}],"wp:attachment":[{"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/media?parent=409"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/categories?post=409"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/tags?post=409"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}