Brute forcing cisco routers and html forms

From: Celine (Celine.Liste@free.fr)
Date: Wed Sep 03 2003 - 05:39:11 EDT


Hi,

I have two problems :

- I try to brute force a cisco router which has a telnet access ("User
Access Verification\n\nUsername:"). This router sends another username
request when the username doesn't match.
I tried with hydra, it seems to send logins correctly but there are only
false positives : all logins seems to be good logins, but it's obviously
false.

- I need to brute force an html form, but all the tools I've tried (brutus,
wwwhack, hackerttp, ...) doesn't seem to work. I can perhaps write a
script with curl (with the -F or -d option), but I find weird that no tool
works.

Does anyone has had the same problems or know other tools for these two
points ?

Thank you

Céline

---------------------------------------------------------------------------
FREE Trial!
New for security consultants and in-house pros: FOUNDSTONE PROFESSIONAL
and PROFESSIONAL TL software. Fast, reliable vulnerability assessment
technology powered by the award-winning FoundScan engine. Try it free for 21 days at: http://www.securityfocus.com/sponsor/Foundstone_pen-test_030825
----------------------------------------------------------------------------



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:39 EDT