Practical exercises: erinevus redaktsioonide vahel
Mine navigeerimisribale
Mine otsikasti
P →Task 3 |
|||
| (ei näidata sama kasutaja 3 vahepealset redaktsiooni) | |||
| 1. rida: | 1. rida: | ||
== Password and Brute-Force Attacks== | == Password and Brute-Force Attacks== | ||
=== Task 1 == | === Task 1 === | ||
* Some hints how you could identify the "secret" page (the name of the link is based on the password of Sid Jones) | * Some hints how you could identify the "secret" page (the name of the link is based on the password of Sid Jones) | ||
<pre> | <pre> | ||
| 16. rida: | 16. rida: | ||
./yourscript | ./yourscript | ||
</pre> | </pre> | ||
=== Task 2 === | |||
Use the following dictionary | |||
* http://cma.ex/female-names | |||
=== Task 3 === | |||
* Firstly, locate tomcat application manager interface and get valid credentials to this manager. | |||
* Use '''root''' and '''master''' as usernames for all the accounts you have to guess/crack during this task | |||
* Use the following password list http://cma.ex/1000-passwords.txt | |||
Viimane redaktsioon: 14. november 2010, kell 14:26
Password and Brute-Force Attacks
Task 1
- Some hints how you could identify the "secret" page (the name of the link is based on the password of Sid Jones)
Step1, on command line:
echo {a..z}{a..z}{a..z} >> words.txt
Step2, in bash script:
for i in $(cat words.txt)
do
wget "http://TARGETIP/"$i".html"
done;
Step3, run the bash script on command line:
./yourscript
Task 2
Use the following dictionary
Task 3
- Firstly, locate tomcat application manager interface and get valid credentials to this manager.
- Use root and master as usernames for all the accounts you have to guess/crack during this task
- Use the following password list http://cma.ex/1000-passwords.txt