Zaur
338eacd63b
Preciser reporting in bruteforcing password with bad response
...
When bruteforcing for multiple logins and passwords the bad response code reported
might indicate a match! But the reporting for it is not clear enough.
For example "Unkown response for admin" might mean a user name admin and some password
or a password 'admin' for some user.
This commit makes in unambiguous reporting a bad response, and naming which login and
which password caused it.
2017-03-25 16:18:05 +01:00
Christian Mehlmauer
442884b5c5
remove executable flags
2016-05-09 16:19:11 +02:00
Christian Mehlmauer
816b18b604
drop ruby 1.9 support, whitespaces
2016-02-23 18:07:20 +01:00
erwanlr
cea01d8aa0
Improves brute forcer output to avoid confustions
2016-02-13 16:44:29 +00:00
erwanlr
cc737090a2
Fixes incorrect detection of the username
2015-08-13 10:27:33 +01:00
Christian Mehlmauer
f4f1390b67
fix some code styling issues
2015-06-21 10:59:57 +02:00
Christian Mehlmauer
b931df654d
fix #796
2015-05-12 21:28:12 +02:00
erwanlr
a4bbf41086
Forces UTF-8 encoding when enumerating usernames - Fixes #801
2015-04-11 12:26:15 +01:00
Christian Mehlmauer
0aa8a97070
additional output
2015-04-02 07:17:58 +02:00
berotti3
42f278aafe
Available take username for wordpress 3.0 or lower.
2015-02-21 15:48:28 +09:00
erwanlr
88808db9a5
Fixes the progressbar being overriden by next brute forcing attempts
2014-12-10 22:05:35 +01:00
erwanlr
dfad0fd6bd
Implements Firefart solution to avoid mandatory blank newline at the end of the wordlist
2014-12-10 21:56:45 +01:00
erwanlr
ac609445fb
Adds a statement about mendatory newlines at the end of list - Ref #739
2014-12-10 18:11:12 +01:00
erwanlr
0223f74a53
Adds the --usernames option - Fixes #739
2014-12-10 17:59:07 +01:00
Christian Mehlmauer
7f9e178f75
changed some colors
2014-09-22 23:34:42 +02:00
erwanlr
5f53297f58
Also ensure to not process empty Location headers
2014-08-15 23:00:42 +02:00
erwanlr
cebd808674
Ensures a nil location is not processed when enumerating usernames
2014-08-15 22:54:17 +02:00
Christian Mehlmauer
479b21a722
Replace all occurences
2014-07-10 00:30:33 +02:00
Christian Mehlmauer
ceeaeaf487
better username extraction
2014-07-10 00:24:20 +02:00
erwanlr
302f1da066
Ensures a clean abort of Hydra, Ref #461
2014-05-10 10:23:24 +02:00
erwanlr
474816762f
Use less memory when brute forcing with a large wordlist
2013-10-05 20:03:34 +01:00
erwanlr
f4460f315e
Fix #249 & #275
2013-10-02 15:36:02 +01:00
sullo
870201de14
Don't skip passwords that start with a hash. This is fairly common (see RockYou list for example).
2013-09-12 09:30:23 -04:00
Christian Mehlmauer
d2696a53ef
minor updates
2013-06-09 16:13:56 +02:00
Christian Mehlmauer
c63beaa35d
rspecs
2013-06-09 15:57:41 +02:00
Christian Mehlmauer
1bcabbad4c
use the redirect_to parameter on bruteforce
2013-06-09 15:27:39 +02:00
erwanlr
42efc9f9ec
Fix #182 Remove the progress-bar static length (120), and let it to automatic
2013-05-10 17:44:22 +02:00
erwanlr
662d94e958
Complexity reduced
2013-04-17 15:40:09 +02:00
erwanlr
4c57a00660
Trying to reduce the complexity of WpUser#brute_force
2013-04-17 12:48:18 +02:00
erwanlr
7143c7ffe9
WpUser#brute_force Browser.instance replaced by a local var
2013-04-15 15:55:48 +02:00
erwanlr
df5b8b9c35
WpItems agressive detection progress bar
2013-04-14 18:01:24 +02:00
erwanlr
446910767b
BruteForcer progress bar
2013-04-14 17:30:57 +02:00
erwanlr
6cd349cb24
Code Factoring
2013-04-14 12:51:53 +02:00
erwanlr
4f182dc41b
Format the output of WpUser::BruteForcable
2013-04-13 19:02:14 +02:00
erwanlr
704c6b1669
Detection of the wordlist charset
2013-04-13 18:56:47 +02:00
erwanlr
5d327f5060
Reverts #122 Don't encode login & password as they will be encoded in Typhoeus
2013-04-13 18:02:12 +02:00
erwanlr
92d690e357
Missing @param
2013-04-13 11:04:23 +02:00
erwanlr
7db63bb3e0
BruteForcer moved in WpUser as a module
2013-04-12 21:52:33 +02:00
erwanlr
3525fb87e2
Browser::Actions (no specs)
2013-04-09 17:43:15 +02:00
erwanlr
a9b25edafe
WpUser additional specs
2013-03-30 19:08:47 +01:00
erwanlr
ec9eadda8e
WpUser::Existable specs
2013-03-27 16:52:32 +01:00
erwanlr
d016d33747
New enumeration system
2013-03-19 22:59:20 +01:00
