Brutus Problems

Discuss the many weaknesses of browser security and ways to mitigate the threat

Brutus Problems

Post by jadecook on Wed Aug 22, 2012 9:07 am
([msg=68916]see Brutus Problems[/msg])

So I've been trying to check my website's FTP security but I am having trouble with Brutus. I have,

Target: URL
Type: FTP
Port: 21
Proxy Type: SOCKS v5
Proxy Address: *removed IP
Proxy Port: 8080
Unlimited Attempts
Use User: Unchecked
Pass Mode: Word List
Pass file: Words.txt

It runs,

Initializing...
Resolved %URL% to %IP%
Unable to verify target %URL%, check connection settings/timeout

Keep in mind, this is my first time using Brutus. Any help, advice, info would be amazing!
Last edited by tremor77 on Wed Aug 22, 2012 9:32 am, edited 1 time in total.
Reason: Removing an IP
User avatar
jadecook
Experienced User
Experienced User
 
Posts: 77
Joined: Fri Aug 17, 2012 2:20 pm
Blog: View Blog (0)


Re: Brutus Problems

Post by tremor77 on Wed Aug 22, 2012 9:35 am
([msg=68918]see Re: Brutus Problems[/msg])

Is the target URL and port correct? Perhaps you should use the actual IP of the FTP server.. the url for the domain may be resolving to something else depending on the server setup.
Image
User avatar
tremor77
Contributor
Contributor
 
Posts: 897
Joined: Wed Mar 31, 2010 12:00 pm
Location: New York
Blog: View Blog (0)


Re: Brutus Problems

Post by jadecook on Wed Aug 22, 2012 10:11 am
([msg=68921]see Re: Brutus Problems[/msg])

tremor77 wrote:Is the target URL and port correct? Perhaps you should use the actual IP of the FTP server.. the url for the domain may be resolving to something else depending on the server setup.


Yeah, I've tried using the IP. I can actually connect to the FTP terminal via command line, but Brutus doesn't seem to want to "verify".
User avatar
jadecook
Experienced User
Experienced User
 
Posts: 77
Joined: Fri Aug 17, 2012 2:20 pm
Blog: View Blog (0)


Re: Brutus Problems

Post by tremor77 on Wed Aug 22, 2012 10:17 am
([msg=68922]see Re: Brutus Problems[/msg])

try without proxy - server may be running some kind of dnsbl - blocking proxy connections. Just dont get yourself IP banned from your own FTP.
Image
User avatar
tremor77
Contributor
Contributor
 
Posts: 897
Joined: Wed Mar 31, 2010 12:00 pm
Location: New York
Blog: View Blog (0)


Re: Brutus Problems

Post by jadecook on Wed Aug 22, 2012 1:47 pm
([msg=68929]see Re: Brutus Problems[/msg])

tremor77 wrote:try without proxy - server may be running some kind of dnsbl - blocking proxy connections. Just dont get yourself IP banned from your own FTP.


Haha, alright.
But say I want to use a proxy, is there any way to do that?
User avatar
jadecook
Experienced User
Experienced User
 
Posts: 77
Joined: Fri Aug 17, 2012 2:20 pm
Blog: View Blog (0)


Re: Brutus Problems

Post by tremor77 on Thu Aug 23, 2012 12:44 am
([msg=68945]see Re: Brutus Problems[/msg])

jadecook wrote:
tremor77 wrote:try without proxy - server may be running some kind of dnsbl - blocking proxy connections. Just dont get yourself IP banned from your own FTP.


Haha, alright.
But say I want to use a proxy, is there any way to do that?


I've found proxy options for some protocols (like ftp) with tools like brutus can be.. fickle when it comes to their success rate. If you really want to test your ftp and also cover your origin, a vpn might be more appropriate... or spoof a mac address and get on a public wifi. Biggest problem i've ever had was connection failure lockouts.. my own ftp server locks accounts for 10 minutes after 5 failed connections. Can make for a really slow attack.
Image
User avatar
tremor77
Contributor
Contributor
 
Posts: 897
Joined: Wed Mar 31, 2010 12:00 pm
Location: New York
Blog: View Blog (0)



Return to Web

Who is online

Users browsing this forum: No registered users and 0 guests