Brutus AET2 - The Basics
Brutus is an old but still nice Tool to BruteForce in the internet.
Today Iam gonna show you the Basics how to use it.
Why do I release this Tutorial? Because an HF-Member needs it.
Spoiler (Click to View)
What do we need?
Brutus AET2 -MultiUpload-
Brutus AET2 -Hoobie.net-
Never forget the VirusScans:
VirusTotal Scan
NoVirusThanks Scan
Dont be scared, it is detected as "SPR/Brutus", "PWCrack.Brutus" etc, why? Because IT IS an PWCracker (Bruter).
Alright, lets start!
First, here are the ScreenShots Ive made (I will fall back on them in the Tutorial)
The MainWindow:
[IMG]http://img691.imageshack.us/img691/9598/brutusaet2tutpic1.png[/IMG]
The ProxyWindow:
[IMG]http://img341.imageshack.us/img341/3900/brutusaet2tutpic2.png[/IMG]
The MiniMenu (AttackMethod):
[IMG]http://img199.imageshack.us/img199/4681/brutusaet2tutpic3.png[/IMG]
The MiniMenu (ProtocolType ; hypertext ; filetransfer):
[IMG]http://img522.imageshack.us/img522/8283/brutusaet2tutpic4.png[/IMG]
Alright, in this Tutorial we will try to BruteForce a FTP-Servers AccessData.
Dont worry, ill describe the Combo/Wordlistthing too! 😅
Alright, at first we need the IP, or URL of the FTP-Server:
We will use the FTP-Server "imurtestvictim.square7.ch".
Normally you have to do it like this "ftp.imurtestvictim.square7.ch", but you will chose the Prot.-typ later, and we will chose FTP, so we dont have to do it like this.
Alright!
So, take a look at the redmarked part of the Picture "MainWindow".
Write the ServerIP/ServerURL into the "Target"-TextBox.
We will type in "imurtestvictim.square7.ch".
After this, we chose the Protocol-typ (as I said before). Take a look at the Pricture "The MiniMenu: (Protocoltype...)".
We will chose FTP, because our target is an FTP-Server.
Okay, now we leave the redmarked part and take a look at the greenmarked
part. Here we chose the Port that we want use the attack on.
If you chose HTTP, the standardport is 80, Brutus will have it in the Textbox, if we chose FTP, the standardport is 21, Brutus will chose this one. ONLY if you KNOW that the Server uses something like Port 23 for the FTP, then change the Port to 23 instead of the 21.
Okay, now you see the Connections and Timeouts, this isnt that important for now, we will just leave it as it is.
Alright, as you know, BruteForcing a Server that ISNT YOURS is not legal, so you should hide your IP right? If you want to do this, Brutus supports the ProxyFunction. To activate it, just check the checkbox "Use Proxy", and the Window "Proxy Definition" will Popup (Picture: The ProxyWindow).
Here you just chose the ProxyType, then the Address and the Port of the Proxy. If it needs an Auth, just check the "Proxy requiers Auth"-checkbox and type in the Username and Password. If not, leave the checkbox unchecked.
Okay. The next part is about special Options. This is not needed here, so we leave everything as it is.
Next part is the yellow part (MainWindows l Picture). Here are the Authentication Options, you want Brutus to use.
Okay, first part is the Username of the FTP-Server (here we use FTP).
If you KNOW the Username of the Server, just check the "Single User" and the in the Username into the "User File"-Textbox.
If it DONT need a Username, uncheck SingleUser and Use Username.
If you DONT KNOW the Username, but think it requiers one (You can check it if you type in "ftp.xxx.com" into your browser, it will show up a Window with "User: & Pass:" or only "Pass"), uncheck the SingleUser-checkbox and check the UseUsername-checkbox. Then click the "Browse"-Button and chose the Textfile where your username-list is located.
INFO: Brutus gives you a (small) Usernamelist, you can chose this if you dont got another (better) one.
Okay next thing will be the way how Brutus have to find out the password.
You can chose 1/3 ways (The MiniMenu (AttackMethod) l Picture):
1.)Wordlist
Well, I think a good Password(Word-)list is the best way to "crack" the AccessData, because you dont have passwords like "ee" or something in it, if you use Bruteforce, it will contain these passwords too.
2.)ComboList
If you use ComboList, just chose what seperation is used, you can chose it on the right side of the "PassMode"-Menu if you checked "ComboList" (: , l or tab).
3.)BruteForce
BruteForce is the way, where you will find out the password 100%, but it can take years (100years or more too!). BruteForce is not recommended to people without a SuperComputer, and I dont think anyone here got one.
If you CHOSE BruteForce, you can chose what Symbols have to be used for the attack (abcde...) or (abcde..ABCDE...) or (abcde...ABCDE...12345) or (abcde...ABCDE...12345...(§)"$=).
Alright, because this isnt our FTP-Server, we will chose the Wordlist, because we can use one with the password in it, because this is just to show you how it works. ;)
So we check "Word List" in the PassMode-Options, and Browse our Word.txt.
The options now are:
Target:
imurtestvictim.square7.ch
Type:
FTP
Authentication Options:
[x] UseUsername [x] SingleUser
UserFile: userfile.txt
PassMode: Wordlist
PassFile: word.txt
Okay, all options are configurated, so we click the Start button at the right site/top of the Window.
So the application starts the attack.
Info: If you want to pause, (after clicked start, the startbutton changes into a pausebutton), click the pausebutton. If you want to stop, click the stopbutton, and if you want to clear everything, click the clearbutton.
Alright, the "Positive Authentication Results" (bluemarked) will show:
Target Type Username Password
imurtestvictim.square7.ch FTP imurtestvictim.square7.ch_lmao ops94
PS: FTP-ServerAccessData have been changed, so dont even try to access 🙃
--
Alright elson, I really hope this helped you, and of course I hope it helped you all.
--
Cheers 🤝
Deox