Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Java 

How to create a Java BruteForcer

Hey so I want to know how to make a brute forcer In java. Whether it be fast or slow IDC. I want to make a bruteforcer. So if anyone can help me that would be awesome! Thanks!
Check out Apache HTTP client, I made a Twitch brute forcer with it. PM me for help!
Break in into simple steps: What happens when I log in normally and then how can I replicate that and make it go extremely fast.

A bruteforcer is one of the simplest things you can do, but good luck.
Any plans of open sourcing this? Would love to see it! Maybe even git hub so we can follow along
Look at Apache HTTP Client, it should fit all of your needs. Buteforcers are generally not too bad to make.
By "Bruteforcer" do you mean that you want to bruteforce some login for some particular service? A website? A program?
Making something that generates random stuff is easy. Making it test that random stuff without getting you in trouble or failing (CAPTCHA, bans, etc.) is harder.
[Image: TEGE4Zx.png]

Puzzle level: 2/5
Read from a user:pass text file, send a http post to site login, handle exceptions and repeat with next line of text file.
(Sep 19, 2014 03:08 PM)Trisomy 21 Wrote:  Read from a user:pass text file, send a http post to site login, handle exceptions and repeat with next line of text file.
You'll also want to loop through a proxy list and check for exceptions on that as well.
What I do know is how to create all the visuals, read text files line by line and in formats, and write files. The only thign im unfamiliar with is networking. How do I use proxies (I know what proxies are used for) and how to login in and get if it fails or not.
Some options for proxies:
http://stackoverflow.com/questions/12079...by-the-jvm

Some options for logging in would be Selenium and JSoup:
http://stackoverflow.com/questions/10156...crawl-data
http://www.pushtotest.com/selenium-tutor...tutorial-1
http://jsoup.org/cookbook/
You don't need to create a Brute Forcer... You are a Brute Forcer!
(Sep 19, 2014 05:00 PM)Dr. Jesus Wrote:  You don't need to create a Brute Forcer... You are a Brute Forcer!

My god. Jesus please bless me with the amazing power of forcing brutes
(Sep 19, 2014 05:24 PM)Brute Forcer Wrote:  My god. Jesus please bless me with the amazing power of forcing brutes

I teach u brute force ability.
Step 1 find a username to hake
Step 2 find minimum length for password for the application.
Step 3 begin attempts at logging in: (Assume min pass length is 4)
aaaa, aaab, aaac, aaad, aaae, aaaf.
Step 4 repeat until fingers bleed/success.

That concludes my tutorial. Plz like an fevrite if u enjoid. Plz donate to [email protected]

And now for some useful information.
Before you actually start your brute force attack make sure you use a dictionary attack. The dictionary would contain a list of the most common passwords and could speed up the process indefinitely.
(Sep 19, 2014 11:40 PM)๖ۣۜSerendipity Wrote:  I teach u brute force ability.
Step 1 find a username to hake
Step 2 find minimum length for password for the application.
Step 3 begin attempts at logging in: (Assume min pass length is 4)
aaaa, aaab, aaac, aaad, aaae, aaaf.
Step 4 repeat until fingers bleed/success.

That concludes my tutorial. Plz like an fevrite if u enjoid. Plz donate to [email protected]

And now for some useful information.
Before you actually start your brute force attack make sure you use a dictionary attack. The dictionary would contain a list of the most common passwords and could speed up the process indefinitely.

Haha, I sure hope he's using a dictionary attack.... are you would be needing a fuck ton of proxies even though he will already need quite a few
(Sep 19, 2014 11:48 PM)▁▂▃▄▅▆M1kep▆▅▄▃▂▁ Wrote:  Haha, I sure hope he's using a dictionary attack.... are you would be needing a fuck ton of proxies even though he will already need quite a few

OFC I will use a dictionary attack. No way I am going through a list of aabcd1242 (I did make a program in java to create a txt like that). Though I will only use every possible word if its on a certain account. But I cant do it if their password is "AAb.ka#.12.ggwpiswr.jesusIsGrEaYte s2d.as/@fasj$@@ScrubsDont H8 Do N8"


Possibly Related Threads...
Thread / Author Replies Views Last Post
[Java] by President HolyFeb 8, 2014 11:48 AM 3 193 Feb 8, 2014 11:48 AM
Last Post: Knautschtabak
[Java] by CatchMeIfYouCanOct 23, 2012 12:53 PM 6 439 Oct 23, 2012 12:53 PM
Last Post: redpois0n
[Java] by TomTehGamerAug 25, 2012 03:04 PM 15 376 Aug 25, 2012 03:04 PM
Last Post: Shady ^_^