[Sommmen]

Today we'll be creating a combolist that fits your needs.
Perfect for Sentry MBA
all required resources are available in that thread, please pay it a visit and say thanks.

Table 'o content.

• C-C-Combo bbbreaaker!
  


• Forum leeching
  


• Passwords
  


• Combo2Mail
  


• Creating your list with AIOHNB
  

combolists are .text documents with emails, passwords and/or usernames in a format which cracking programs - like Sentry MBA - can use to bruteforce accounts. Because we got the nifty program Combo2mail (you could also google 'emaillist' although most will be paid since they're also used in cpa/ppd/advertising, so this method is way easier) we only need to focus on getting usernames and passwords.

the easiest way of acquiring usernames is via Forum leeching.

Forum leeching
this section will cover forum leeching. We will use AIOHNB to:
- go to a specific forum
- go to the members page/profile page
- search for a/all usernames
- save these to use later.

this covers forum leeching for forums that require no login information to acces the members/profile page. (i can't seem to figure post data out, HMU if you can help me with that)
in this example, we'll use the Dutch Minecraft forum. you can see all profiles without loggin in so it's perfect.

fire up the program and go over to Forum leecher.

1. give it a name in the first box.
   


2. input the site url, just copy paste ;). we're using http://minecraftforum.nl/ here.
   


3. we have to give the program the correct page. using the members page is the easiest as it mostly contains several usernames. this site however does not have anything like that, so we're using the profiles.
   
   click on a random member and you'll get something like: http://minecraftforum.nl/index.php?actio...ile;u=5383 if you manipulate the numbers at the end you'll end up with a different username everytime. change the last number to 1, since that's the first profile page. paste it in (a).
   


4. righty. now we're going to tell the program what to do in order to progress through the pages. take your random link - http://minecraftforum.nl/index.php?actio...ile;u=5383 - and change the number that changes everytime you find an unique username with
   Code

   [page]
   
   you'll end up with this: minecraftforum.nl/index.php?action=profile;u=[page]
   
   as we defined the website earlier we can shorten this link (it's required! ) so remove your 'http://site.com' from your link.
   now you got what we need: /index.php?action=profile;u=[page]
   
   paste it in (b)
   


5. now we have to define the ranges we're looking at. this forums has over 31,559 members ('leden 31,559' as stated below) so you can go up as high as that.
   
   fill in the boxes:
   first page: 1 (most of the times it's just 1)
   last page: 31,559 (for this particulair site, since it has that amount of members. you could also put a lower number here, if you want a smaller list)
   increment: 1
   
   


6. now we gotta tell the program where to find the actual username. we're doing this by detecting certains strings in the HTML code. these are for every site different (most of the time).
   
   i'm using firefox ;)
   
   go to a random profile page, ex. http://minecraftforum.nl/index.php?actio...ile;u=5383 and look at the username. Copy that name.
   
   now right click -> view source.
   this will display all the html code.
   
   press CTRL + F to open up the wordfinder and paste your copied username. we're looking for a piece of code that only displays the username and nothing else, since that's only what we need.
   
   i came up with a couple pieces containing the username.
   
   Code

       <title>Profiel van Fancypants</title>
<div class="username"><h4>Fancypants <span class="position">Sectiemoderator</span></h4></div>
   
   we have to specify which word is an actual username, so for 'the first left parse' and 'the first right parse' we're gonna copy and past surrounding text so it knows that the username is the word in the middle.
   
   i chose the last line, as it was easier.
   the first parse is '<h4>' or even simpeler: '>' and the right parse ' <span class="' (notice the space b4 <span). make sure on of your parses is longer because the html code the program is scanning can contain severall '>blabla< ' and you'll end up with one username and lots of random pieces of useless code.
   


7. and that's it! easy right? just click on logs, and check 'debug mode' and press on leech. (be sure to save aswell). it will start to gather usernames.
   
   (i put 5565 as firs page since i crashed whilst leeching. i did this so it would just continue from that point at which i crashed.)
   
   

Passwords
for a combolist you need some passwords. you can google 'common passwords' or search around for a big passwordlist/wordlist.
i use this password list: https://www.dropbox.com/s/pboc42j21rag7l...swords.txt

Combo2mail
some sites require not your username, but your email to login. this small tool simply adds '@live' or something similar to all your words. if you want an emaillist use this to convert usernames -> mail.

Creating your list with AIOHNB
by now you should have a username list and a password list (or emaillist). if you're forum leeching just press 'Send to' and it will send you to the Wordlist manipulator.

(if you just launched it from the menu you won't see any names)

if you want an email:password list, be sure to Click Load (left side) and browse to your emaillist. don't forget to remove dupes.

the right box is reserved for a password list, so click load and browse to your password list.

! the password list must be smaller than the username list, it can't be bigger! (you can scrape some words of your list if you want)

in 'string separator' (middle right) input:

Code

:

click 'combine user pass' and it will create your combolist. :'D.

! some sites want a username/pass longer than for ex. 6 characters. use this: to rule out passwords smaller than ex. 6 etc. it's pretty self explanatory. be sure to load your combolist first.

that includes todays tutorial, please leave a post with tips/suggestions/mistakes/constructive criticism and other helpfull information. keep this alive if it was usefull to you.

i will improve as much as i can based on feedback and might add more soon.

Need help post below, or visit the 'tutorials' in the program itself.

---

Quick update, i fixed the links. would really like some feedback on this tut :')

[TehHaxx]

Good tut, dont suppse you can share where you got AIOHNB from. I saw a dl on page 1 in google from hostr with a 3/53 virus scan, is that legit?

[SIM-1993099]

I would also like to know where to get this from. Seems nice tho c: Good tut

[synnergy]

I would also like to know where to get this from. Seems nice tho c: Good tut

https://hackforums.net/showthread.php?ti...sentry+mba
Look there, everything you need :).

[Sommmen]

https://hackforums.net/showthread.php?ti...sentry+mba
Look there, everything you need :).

yup. already stated that in the first couple of lines lol.

[tatsucheng]

@Sommmen
Thank you so much for the tutorial but one question i have how can i find the passwords, i know you have given us the password list you used but is there any way to get password from specific site or to get pass for different site?

[FxGrunn]

Nice tutorial. definitely going to try this out. thanks for sharing

[Elena Gilbert]

You should edit your tutorial and the first right parse is ' <span class= ' not ' <span class='' '

[ISO]

Really useful method , thanks for sharing it !

[x34c]

You should edit your tutorial and the first right parse is ' <span class= ' not ' <span class='' '

They will both work fine wtf you talking about

[Sommmen]

They will both work fine wtf you talking about

he pm'd me later and he got it working aswell :)

[Elena Gilbert]

Not really, i thought it worked however it was running but not giving any username maybe the space im not sure but good job and thanks for the share.

[TehMuhZLiM]

Thanks this has helped me make several very hq combolists

[evrin]

thanks for sharing mate, usefull guide and program ! thanks a lot

[GrimLeaker]

good tutorial. many things were new to me in this