+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Need help with Brute Force (BurpSuite) (/showthread.php?tid=5754572)
Need help with Brute Force (BurpSuite) - Linusky - Nov 18, 2017
Hi guys
The website I am testing here does not have any captcha (which is ez for brute force), however it does only allow one login per ticket. It does not affect regular users because the ticket gets regenerated when browser gets refreshed. How do I get burp suite to generate new ticket every time it does a new payload?
A snapshot of it
user_session%5Busername%5D=fakeusername&user_session%5Bpassword%5D=§password§<=LT-1511018798r8EB3B66739CF2C09B5&service=&commit=Log+In
As you can see, the lt=LT-xxxxxx specifies the ticket. The website does not allow the usage of same tickets. Is there a way to get around this? (In browser when the page gets refreshed, new ticket will be generated but not in burp suite).
I tried generating some random string with 29 digits but it is not working.
RE: Need help with Brute Force (BurpSuite) - SIM-99893 - Nov 18, 2017
hmm, burpsuite? why not use SentryMba.
RE: Need help with Brute Force (BurpSuite) - Linusky - Nov 18, 2017
(Nov 18, 2017 09:40 AM)Marichu™ Wrote: hmm, burpsuite? why not use SentryMba.
Okay, no. SentryMBA is for mass account dumping. What I am doing here is to crack a password of a specific user on a very specific website.
(website is vhlcentral.com)
website has several test banks for couples books, used to have an account but someone changed password.
RE: Need help with Brute Force (BurpSuite) - Las3rz - Nov 18, 2017
(Nov 18, 2017 10:56 AM)Linusky Wrote: Okay, no. SentryMBA is for mass account dumping. What I am doing here is to crack a password of a specific user on a very specific website.
(website is vhlcentral.com)
website has several test banks for couples books, used to have an account but someone changed password.
Not true, Sentry is for brute forcing whether that means 1 account, or multiple accounts. You could load a wordlist with that "specific user" as the only user. Or load a username list and password list (same concept).
bob:pass1
bob:pass2
bob:pass3
etc..
As well Sentry allows for the variables computed during a login attempted to be refreshed at each attempt (thus refreshing your unique ticket) ...with the "Refresh Data" box when making a configuration for that site.
Don't dismiss a tool just because you've never used it or are unfamiliar with it. Which clearly you are, by saying it's for mass account dumping, whatever that even really means.
RE: Need help with Brute Force (BurpSuite) - Linusky - Nov 18, 2017
(Nov 18, 2017 01:51 PM)Las3rz Wrote: Not true, Sentry is for brute forcing whether that means 1 account, or multiple accounts. You could load a wordlist with that "specific user" as the only user. Or load a username list and password list (same concept).
bob:pass1
bob:pass2
bob:pass3
etc..
As well Sentry allows for the variables computed during a login attempted to be refreshed at each attempt (thus refreshing your unique ticket) ...with the "Refresh Data" box when making a configuration for that site.
Don't dismiss a tool just because you've never used it or are unfamiliar with it. Which clearly you are, by saying it's for mass account dumping, whatever that even really means.
Sorry for my lack of knowledge. I was so confused with SentryMBA because whenever I do any research related to Sentry, all I see is massive account dumping tutorials of netflix, hulu, etc.
Is there some guide I can use? Thanks for the help!
RE: Need help with Brute Force (BurpSuite) - CyberStrike - Nov 19, 2017
Linsuky I am guessing that intruder is using the same value for the session check out repeater which will carry out a new request and hopefully a new session number
https://portswigger[.]net/burp/help/repeater_using
https://portswigger[.]net/burp/help/repeater_options
http://resources.infosecinstitute[.]com/burps-session-handling-mechanisms/
https://support.portswigger[.]net/customer/portal/articles/1964073-using-burp-to-hack-cookies-and-manipulate-sessions
Edit: I see lots of people here using sentry MBA and I think if you kept popping in the same user name for each password value it would be pretty much at one user only not a mass dumping.
RE: Need help with Brute Force (BurpSuite) - Linusky - Nov 19, 2017
(Nov 19, 2017 06:16 AM)sirru5h Wrote: Linsuky I am guessing that intruder is using the same value for the session check out repeater which will carry out a new request and hopefully a new session number
https://portswigger[.]net/burp/help/repeater_using
https://portswigger[.]net/burp/help/repeater_options
http://resources.infosecinstitute[.]com/burps-session-handling-mechanisms/
https://support.portswigger[.]net/customer/portal/articles/1964073-using-burp-to-hack-cookies-and-manipulate-sessions
Edit: I see lots of people here using sentry MBA and I think if you kept popping in the same user name for each password value it would be pretty much at one user only not a mass dumping.
OMG THANK YOU!!! I did not realize that!!!
RE: Need help with Brute Force (BurpSuite) - CyberStrike - Nov 19, 2017
Well I hope it helps web apps are not my strong point to be honest.
RE: Need help with Brute Force (BurpSuite) - Las3rz - Nov 19, 2017
(Nov 18, 2017 02:35 PM)Linusky Wrote: Sorry for my lack of knowledge. I was so confused with SentryMBA because whenever I do any research related to Sentry, all I see is massive account dumping tutorials of netflix, hulu, etc.
Is there some guide I can use? Thanks for the help!
You can start with Googling 'Sentry MBA tutorials' or 'Sentry MBA configs'. It will get your started in the right direction understand the tool and finding other places more into that field. Sentry is more of a "cracking" tool between cracking and hacking, which you will notice by the forums that appear from the search results.
RE: Need help with Brute Force (BurpSuite) - ernestmiller - Nov 19, 2017
is there anyway to get the Sentry MBA tool on Linux or is it purely a Windows thing??
RE: Need help with Brute Force (BurpSuite) - CyberStrike - Nov 19, 2017
That is a good question checking on WineHQ looks like it has some issues with Wine. But all you need is a userlist and password list and you can mass crack in hydra or in burpsuite.
RE: Need help with Brute Force (BurpSuite) - ernestmiller - Nov 19, 2017
The hydra syntax is so finnecky though and sensitive as well would rather use the sentry mba GUI if I could get