Beginners Guide to: Sentry MBA
Sentry MBA is one of the most popular tools in the cracking scene. Getting familiar with Sentry will help you out buckets when it comes to cracking the important stuff. Sentry cannot do everything, but it can do a lot. Here's a guide to help you familiarize yourself with Sentry MBA.
Before moving on, I'd like to note that the config files presented here are not created by me, I'm sharing it as a resource for learning. Cracking against any sites listed here is on your shoulders, not mine. I do not crack myself, so don't ask me for specifics on help. I'm only providing an overview of Sentry MBA.
Prerequisites
password
Don't forget, if you need to convert your combo list into an email list, you can use [this].
Some Additional Notes
Sentry MBA can be used two ways: with or without configs. Config files are essentially pre-made configurations for cracking specific websites or targets. Since Sentry MBA is a very robust tool, it can crack a handful of different authentication types & it is pretty powerful at determining fakes or hits. Since it is able to know all of this, this means that it is also required to have a pretty big chunk of info to get started on a site.
I wont be covering how to make configs in this tutorial, but I will show you how to load a configuration & how to crack with a pre-made config file. I should also note that you do need a config to crack (because I said earlier that Sentry can be used without configs), but you'll need to make it yourself on the fly.
Getting Started
![[Image: fPvzJUZ.png]](https://i.imgur.com/fPvzJUZ.png)
![[Image: XYRrsPY.png]](https://i.imgur.com/XYRrsPY.png)
![[Image: Lq2QTKo.png]](https://i.imgur.com/Lq2QTKo.png)
![[Image: eL6HkHY.png]](https://i.imgur.com/eL6HkHY.png)
The main thing to pay attention to here, to determine whether or not we're cracking correctly, is the HTTP responses. These codes are essential to know if our requests are getting through okay. "Hits" are what we're aiming for. "Reds" are redirects. "Fakes" are, well, fakes. Sentry MBA if configured correctly, can determine when there is a fake response from the server - saving you time when cracking. "To check" is just the remaining amount of combos or usernames:passwords Sentry MBA has left to go through, with your wordlist.
This should help you get an overall understanding of Sentry MBA, and should open the door to playing with it a bit (no pun intended). Get your feet wet with Sentry, and see if you can learn some more. Good luck!
Sentry MBA is one of the most popular tools in the cracking scene. Getting familiar with Sentry will help you out buckets when it comes to cracking the important stuff. Sentry cannot do everything, but it can do a lot. Here's a guide to help you familiarize yourself with Sentry MBA.
Before moving on, I'd like to note that the config files presented here are not created by me, I'm sharing it as a resource for learning. Cracking against any sites listed here is on your shoulders, not mine. I do not crack myself, so don't ask me for specifics on help. I'm only providing an overview of Sentry MBA.
Prerequisites
- Sentry MBA v1.4.1 [here]
- Sentry MBA configs [here]
- Combo list or word list
- Proxy list [here]
- Familiar with cracking [here]
password
Code
http://lethemfind.usDon't forget, if you need to convert your combo list into an email list, you can use [this].
Some Additional Notes
Sentry MBA can be used two ways: with or without configs. Config files are essentially pre-made configurations for cracking specific websites or targets. Since Sentry MBA is a very robust tool, it can crack a handful of different authentication types & it is pretty powerful at determining fakes or hits. Since it is able to know all of this, this means that it is also required to have a pretty big chunk of info to get started on a site.
I wont be covering how to make configs in this tutorial, but I will show you how to load a configuration & how to crack with a pre-made config file. I should also note that you do need a config to crack (because I said earlier that Sentry can be used without configs), but you'll need to make it yourself on the fly.
Getting Started
- click "settings" on the left, then "general"
- click "load settings from snapshot"
- click "lists" on the left, then "proxylist"
- click the open button on the right to select a proxy list to use
- click "wordlist" on the left
- make sure "mode" is set to "combo list"
- click the open button to select a combo list
- optionally, you could use the open buttons next to usernames & passwords to open their respective usernames wordlist and passwords wordlists
- click "progression" on the left, then "progression" (underneath)
- click the "reload list" (green refresh button) on the top right to reload your combolist (to ensure you're using the correct combolist, and not an old one)
- slide the "bots" slider to an appropriate number of workers you'd like to use
- click "start" on the top left
The main thing to pay attention to here, to determine whether or not we're cracking correctly, is the HTTP responses. These codes are essential to know if our requests are getting through okay. "Hits" are what we're aiming for. "Reds" are redirects. "Fakes" are, well, fakes. Sentry MBA if configured correctly, can determine when there is a fake response from the server - saving you time when cracking. "To check" is just the remaining amount of combos or usernames:passwords Sentry MBA has left to go through, with your wordlist.
This should help you get an overall understanding of Sentry MBA, and should open the door to playing with it a bit (no pun intended). Get your feet wet with Sentry, and see if you can learn some more. Good luck!
