| View previous topic :: View next topic |
| Author |
Message |
the the the
Master Cheater
![]() Reputation: 46
Joined: 15 Jun 2008
Posts: 429
|
 Posted: Sun Jun 17, 2012 2:51 am Post subject: bruteforce flash logins |
 |
|
is it possible? does a brute forcer already exist?
thanks
|
|
| Back to top |
|
 |
Garavito
Master Cheater
 Reputation: 0
Joined: 21 Jun 2009
Posts: 387
|
| Posted: Sun Jun 17, 2012 3:24 am Post subject: |
|
|
Yeah, why wouldn't it be possible?
_________________
|
|
| Back to top |
|
|
the the the
Master Cheater
![]() Reputation: 46
Joined: 15 Jun 2008
Posts: 429
|
| Posted: Sun Jun 17, 2012 4:16 am Post subject: |
|
|
| Krillen's Chillin' wrote: | | Yeah, why wouldn't it be possible? |
I have low experience with flash and would really want one (maybe even pay for one).
Can't find shit on google even about it.
|
|
| Back to top |
|
|
potaters
Grandmaster Cheater
![]() Reputation: 72
Joined: 13 Apr 2009
Posts: 969
|
| Posted: Sun Jun 17, 2012 4:44 am Post subject: |
|
|
| Well, typically (unless dev is stupid) flash doesn't directly connect to the database. It is often handled by a language more suitable like php, asp, etc. To find out how its working -- for firefox use livehttpheaders and look for the POST (occasionally GET) of the variables. If its a .exe use Wireshask, but that can give a lot you don't want. Or give me the URL, I am also working on one in PHP currently.
|
|
| Back to top |
|
|
NotReallySureWhatGoesHere
Expert Cheater
![]() Reputation: -1
Joined: 20 Feb 2012
Posts: 110
|
| Posted: Sun Jun 17, 2012 6:08 am Post subject: |
|
|
| asciicat wrote: | | Krillen's Chillin' wrote: | | Yeah, why wouldn't it be possible? |
I have low experience with flash and would really want one (maybe even pay for one).
Can't find shit on google even about it. |
If you could give more information I'd gladly help you for free. There are a few (that I know of) well-coded multi-threaded and tons of features, brute-force'ing applications out there. All you need is the URL and some usernames/passwords. Shit, some even generate those for you, though they're not that great.
EDIT: I'd use WPE Pro, Wireshark, or your browser (if it supports it) to find the URL(s) that the login data is sent to. Chrome supports this -> Right Click -> Inspect Element -> Network
SEE SEE SEE
Request URL:http://forum.cheatengine.org/viewtopic.php?p=5374035#5374035
Request Method:GET
Status Code:200 OK
Request Headersview source
Accept:text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3
Accept-Encoding:gzip,deflate,sdch
Accept-Language:en-US,en;q=0.8
Connection:keep-alive
Cookie:fnid=326737; phpbb2mysql_t=a%3A1%3A%7Bi%3A553386%3Bi%3A1339934986%3B%7D; phpbb2mysql_data=a%3A2%3A%7Bs%3A11%3A%22autologinid%22%3Bs%3A32%3A%2270cc5cecf79b71e0b808c0edca4928f0%22%3Bs%3A6%3A%22userid%22%3Bs%3A6%3A%22326737%22%3B%7D; phpbb2mysql_sid=b1e9d50a02cd1e92c77d3c36772b0aa2; __utma=173100273.558031285.1339932649.1339932649.1339932649.1; __utmb=173100273.29.10.1339932649; __utmc=173100273; __utmz=173100273.1339932649.1.1.utmcsr=google|utmccn=(organic)|utmcmd=organic|utmctr=(not%20provided)
Host:forum.cheatengine.org
Referer:http://forum.cheatengine.org/posting.php
User-Agent:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5
Query String Parametersview URL encoded
p:5374035
URL fragment
#:5374035
Response Headersview source
Cache-Control:private, pre-check=0, post-check=0, max-age=0
Content-Encoding:gzip
Content-type:text/html
Date:Sun, 17 Jun 2012 12:12:07 GMT
Expires:0
Pragma:no-cache
Server:lighttpd/1.4.29
Set-Cookie:phpbb2mysql_t=a%3A1%3A%7Bi%3A553386%3Bi%3A1339935127%3B%7D; path=/; domain=forum.cheatengine.org
Transfer-Encoding:chunked
Vary:Accept-Encoding
X-Powered-By:PHP/5.1.6
|
|
| Back to top |
|
|
Up2Admin
I'm a spammer
 Reputation: 126
Joined: 17 Oct 2007
Posts: 6549
Location: Texas
|
| Posted: Sun Jun 17, 2012 11:35 am Post subject: |
|
|
There's been plenty of BruteForce programs for AQW
_________________
|
|
| Back to top |
|
|
Fafaffy
Cheater
 Reputation: 65
Joined: 12 Dec 2007
Posts: 28
|
| Posted: Sun Jun 17, 2012 12:15 pm Post subject: |
|
|
| ItsJustJosh wrote: | | asciicat wrote: | | Krillen's Chillin' wrote: | | Yeah, why wouldn't it be possible? |
I have low experience with flash and would really want one (maybe even pay for one).
Can't find shit on google even about it. |
If you could give more information I'd gladly help you for free. There are a few (that I know of) well-coded multi-threaded and tons of features, brute-force'ing applications out there. All you need is the URL and some usernames/passwords. Shit, some even generate those for you, though they're not that great.
EDIT: I'd use WPE Pro, Wireshark, or your browser (if it supports it) to find the URL(s) that the login data is sent to. Chrome supports this -> Right Click -> Inspect Element -> Network
SEE SEE SEE
Request URL:http://forum.cheatengine.org/viewtopic.php?p=5374035#5374035
Request Method:GET
Status Code:200 OK
Request Headersview source
Accept:text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3
Accept-Encoding:gzip,deflate,sdch
Accept-Language:en-US,en;q=0.8
Connection:keep-alive
Cookie:fnid=326737; phpbb2mysql_t=a%3A1%3A%7Bi%3A553386%3Bi%3A1339934986%3B%7D; phpbb2mysql_data=a%3A2%3A%7Bs%3A11%3A%22autologinid%22%3Bs%3A32%3A%2270cc5cecf79b71e0b808c0edca4928f0%22%3Bs%3A6%3A%22userid%22%3Bs%3A6%3A%22326737%22%3B%7D; phpbb2mysql_sid=b1e9d50a02cd1e92c77d3c36772b0aa2; __utma=173100273.558031285.1339932649.1339932649.1339932649.1; __utmb=173100273.29.10.1339932649; __utmc=173100273; __utmz=173100273.1339932649.1.1.utmcsr=google|utmccn=(organic)|utmcmd=organic|utmctr=(not%20provided)
Host:forum.cheatengine.org
Referer:http://forum.cheatengine.org/posting.php
User-Agent:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5
Query String Parametersview URL encoded
p:5374035
URL fragment
#:5374035
Response Headersview source
Cache-Control:private, pre-check=0, post-check=0, max-age=0
Content-Encoding:gzip
Content-type:text/html
Date:Sun, 17 Jun 2012 12:12:07 GMT
Expires:0
Pragma:no-cache
Server:lighttpd/1.4.29
Set-Cookie:phpbb2mysql_t=a%3A1%3A%7Bi%3A553386%3Bi%3A1339935127%3B%7D; path=/; domain=forum.cheatengine.org
Transfer-Encoding:chunked
Vary:Accept-Encoding
X-Powered-By:PHP/5.1.6 |
You're a fucking idiot.. You just posted VALID cookies
_________________
| Brillia wrote: | | I FUCKING FUCK SEX |
|
|
| Back to top |
|
|
Slugsnack
Grandmaster Cheater Supreme
![]() Reputation: 71
Joined: 24 Jan 2007
Posts: 1857
|
| Posted: Sun Jun 17, 2012 12:17 pm Post subject: |
|
|
| they're VALID
|
|
| Back to top |
|
|
Fafaffy
Cheater
Reputation: 65
Joined: 12 Dec 2007
Posts: 28
|
| Posted: Sun Jun 17, 2012 12:18 pm Post subject: |
|
|
http://pastebin.com/P017zrnu
I just modified my Cookies extractor/cef poster virus that I posted here before
_________________
| Brillia wrote: | | I FUCKING FUCK SEX |
|
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
