+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Brute force/ dictionary attacking website accounts (/showthread.php?tid=6280044)
Brute force/ dictionary attacking website accounts - debugg - Sep 18, 2024
id like to know if it is possible to use a dictionary attack on a websites log in page like for a example roblox.com/login and how id go about it ?
RE: Brute force/ dictionary attacking website accounts - Cooligan - Sep 18, 2024
First time I've seen someone refer to bruteforcing as a dictionary attack in a long time.
Reminds me of the old days.
RE: Brute force/ dictionary attacking website accounts - StinkButt420 - Sep 18, 2024
I doubt that you'd get even a fraction down whatever list before they prevent you from trying to login to ANYTHING again.
I guess you could try, but I do not recommend it.
RE: Brute force/ dictionary attacking website accounts - Bastille - Sep 18, 2024
You could use a tool like Burp Suite, however be aware that brute force attacks are no longer effective on most websites as security measures have been implemented and became the norm.
You will encounter treshold attempts, like the login to the account or your IP will be blocked after too many tries that failed.
RE: Brute force/ dictionary attacking website accounts - Moooookie - Sep 19, 2024
(Sep 18, 2024 04:44 PM)debugg Wrote: id like to know if it is possible to use a dictionary attack on a websites log in page like for a example roblox.com/login and how id go about it ?
Most websites will lock the account/block your login attempts after X amounts of attempts, and is why dictionary attacks are not really used much nowadays. Better off using combo lists.
RE: Brute force/ dictionary attacking website accounts - DramaKing - Sep 19, 2024
(Sep 18, 2024 04:57 PM)Cooligan Wrote: First time I've seen someone refer to bruteforcing as a dictionary attack in a long time.
Reminds me of the old days.
It's an either/or question.
I think I counted three attempts before the login form forced a CAPTCHA. It would be easiest to manually try passwords.