Prev | Current Page 118 | Next

Mark D. Spivey

"Practical Hacking Techniques and Countermeasures"


*Note:
In this lab toll number 130 will be used. Highlight toll 130 and click
Help
.
Highlight item 130 (Brute Force FTP Client).
Brute Force

305
By clicking on the
Help
tab, you display the syntax of the tool.
The top section of the screen illustrates the correct syntax and examples
of each tool selected. In this example, clicking on the
Example
button allows
you to view the text placed into the center white block of the screen. This is
the execution section. This is the syntax that will be executed and should be
modified to run against the target.
The lowest section contains the status of the tool??™s execution.
306

Practical Hacking Techniques and Countermeasures
In this example there is an FTP server located at
192.168.11.120
. Anonymous
FTP connections are not allowed and access is controlled by usernames
and passwords.
Username.txt and Password.txt files have been created that contain a variety
of combinations to be used in this lab.
The correct username/password should be
mmouse
and
mmouse1
.
Brute Force

307

Click on the
Form
button at the top of the application.

Type the IP of the target in the
dst-ip
field.

Increase the
timeout
field to 60000 (6 seconds).

Select the
stopatfirst
option.

Browse and select the Username file for the
login-file
field.

Browse and select the Password file for the
password-file
field.

Click the
Generate
button and view the syntax to be executed in the
execution section (the white area below the Form section)
.


Pages:
106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130