EvilZone

Hacking and Security => Hacking and Security => : Flamingo Juice April 16, 2015, 06:09:51 PM

: Help applying my brute-force program?
: Flamingo Juice April 16, 2015, 06:09:51 PM
I'm trying to write a program that will return to me the password of an entered account name on a LAN. I have access to connected computers, and I have written a brute-force loop that tests a vector of integers, going through every password between 00000 and 99999 (all passwords follow this format, so it's a decently fast program to attack a weak security system). I've tested the function in a program that stops the loop when the vector is equal to a randomly generated vector within those parameters.

What I don't know (and haven't been able to find) is how to apply this so it can actually return a password. The OS run on this network is Windows 7. I don't want it to log me directly into another account; only to print the password for me. My research on this has been kinda worthless, since I don't even know where to begin with this.

Anyone have any suggestions for how to actually test each password? Do I need the encryption key and the Windows SAM? Am I taking this in completely the wrong direction?

EDIT: I'm not looking for tools to do this for me. The point of this project is the learning experience. I'm writing it in C++
: Re: Help applying my brute-force program?
: P!X3LTR0N April 16, 2015, 08:09:00 PM
Mind posting the source so that we could have a look at it, I would probably be able to give you a direction but your focus seems wrong... So please let me have a look at the code

Thanks in advance.

Pixel
: Re: Help applying my brute-force program?
: M4lwar3 April 17, 2015, 04:05:27 PM
can you show us the code? is it just makes an password or it tries to make a login?
: Re: Help applying my brute-force program?
: jes9ter April 17, 2015, 05:31:56 PM
Show us the source code so we can analyze the error.
: Re: Help applying my brute-force program?
: P!X3LTR0N April 17, 2015, 06:21:15 PM
I don't think it was necessary for all the replies asking for the code. It would have been better and more constructive to wait for OP to post his code and then we could analyze. It is worthless text when everyone asks the same question over and over.