Hack Forums
Password brute force guessing tool for a pattern like a word plus few digits - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Hacking Tools and Programs (https://hackforums.net/forumdisplay.php?fid=10)
+---- Thread: Password brute force guessing tool for a pattern like a word plus few digits (/showthread.php?tid=6097380)



Password brute force guessing tool for a pattern like a word plus few digits - AnonymousMan - Jul 24, 2020

Hi!

Recently my friend told me that he changed his password to his mailbox when he was drunk and forgot the password lol.
I just configured my Kali and I see a nice tool hydra and hydra-gtk, but I'm not sure if it's quite right for this task yet.

So basically I need a tool that will brute force guess a password on a mail server. In most cases people use passwords with patter 1 word + few digits, e.g.: dragon777 or something like that. If I have a word list for the password guessing and I want to define a rule, say $word[0-9][0-9][0-9] (like regular expression or something), then what tool would you recommend on Linux? It should generate minimum needed connections to the server not to create a huge suspocious looking load on their server. It should somehow not generate unnecessary interest (at least theoreticaly speaking) of the server administrator. Possible? I understand there is always some risk to that.

Thanks.


RE: Password brute force guessing tool for a pattern like a word plus few digits - CyberStrike - Jul 24, 2020

use crunch for password generation and use that stdout for hydra's password.. hydra takes stdin. Absolute worst case actually generate the list in crunch you can always delete it after you are done. Best thing though is try to recover through recovery methods.

Not sure but most big email providers do not like password bruteforcing and will lock accounts after X amount of failed logins hence why recovery is the best thing before resorting to your own methods.


RE: Password brute force guessing tool for a pattern like a word plus few digits - Morphezor - Jul 24, 2020

Agree with the previous post but if you anyway want to use method I just suggest to use a tool which allow to change proxy every attempt and set veeery low level of bots (checks every password from the list) to avoid blocking account.
But frankly speaking it is not the best way to get the access to the mail box


RE: Password brute force guessing tool for a pattern like a word plus few digits - AnonymousMan - Jul 25, 2020

(Jul 24, 2020 01:38 PM)Morphezor Wrote:  Agree with the previous post but if you anyway want to use method I just suggest to use a tool which allow to change proxy every attempt and set veeery low level of bots (checks every password from the list) to avoid blocking account.
But frankly speaking it is not the best way to get the access to the mail box

Hi. What do you mean by "veeeery low level of bots" ?
And what's the best options here to get access to a mailbox when password is lost?


RE: Password brute force guessing tool for a pattern like a word plus few digits - khokhar1 - Jul 26, 2020

can someone help to recover my btc wallet ?


RE: Password brute force guessing tool for a pattern like a word plus few digits - AnonymousMan - Jul 27, 2020

(Jul 26, 2020 03:19 PM)khokhar1 Wrote:  can someone help to recover my btc wallet ?

I sent you a PM.