Could anyone give me references or site that would have tutorials or information on learning how to use brutus?

this was wriiten by aeon :

1) Set the service TYPE you are trying to brute force...for example, FTP on PORT 21. Also set the TARGET = x.x.x.x (the IP address here of the computer you are trying to brute force)

2) Set the CONNECTIONS to about 10 or so, the higher the connections, the quicker you can Brute force...but only if you have broadband, otherwise stick with only a few connections. (this is how many connections at once the brute force tries to make when breaking in)

3) Set the TIMEOUT to 10 or so also, this just tells Brutus how long to wait for a connection response before closing it. So if it is too low, it will never connect if the connection is slow. So 10 is decent.

4)Modify your 'USERS.TXT' file found in the Brutus directory. Go in and add the names of the accounts you think there will be. I suggest:

admin

administrator

test

root

guest

backup

user

Now save it.

5)Under authentication options:

Check 'USE USERNAME' and browse to your 'USERS.TXT' file that you edited earlier.

6)Set PASS MODE = Wordlist & PASS FILE = 'WORDS.TXT' (words.txt is also in the brutus directory, and will be the dictionary list of words for Brutus to attempt to try as the password. You may haev to go out and find a bigger wordlist.)

7) Run it and hopefully after awhile, it will turn up user names and passwords. Tehn telnet to the computer on that particular port and use the login information to gain access.



or http://www.hoobie.net/brutus/brutus-faq.html

[This message has been edited by jackketch (edited 04-19-2004).]

Whats funny is. I found this right under this post. www.geocities.com/i_azazel_i/xxx.txt (http://www.geocities.com/i_azazel_i/xxx.txt)

well i kinda figured he'd find that one.....

Another neat thing I didn't mention about Brutus before was that:

If you set your connections to the max, and your Timeout LImit to its lowest, you can DoS a server or someones computer who's is reaonsable slow and not able to keep with that many connections.

My new D.O.S. Tool, Thanks ;P

^^^^^2nd that

Fuck. I go to open brutus and in the file folder there's no icon.

The shortcuts all don't work and the icon disappeared making them blank files.

When ever I run it from IE memory or download and save it, the brutus won't open and nothing happens after I double click it.

Even when I open the file and just extract the application there is no icon and it won't run.

Anyone have any help on how I could open it if that would still be possible, or why this is happening.

Ok, I think I got this down.

I used my comcast.net ftp account to practice and just entered in the address, and selected ftp.

I put my user name in the brutus form and then put my password somewhere in the passlist.

It found the password in a few seconds, I didn't put it too far from the top of the list.

I've been trying with various sites. At the bottom the Timeout adn Throttle keep flashing. It's set on basic auth and using a specified user name with the word list I found and will soon expand.

Am I doing everything right?

Could someone also explain what the option for the types of pages are.

Http basic auth and form I'm not sure of.

http://img.villagephotos.com/p/2003-7/296252/Brutus.GIF

I sux0r.

I personally prefer the age old method of social engineering and shoulder surfing.

Help.