Results 1 to 9 of 9

Thread: java password cracker

  1. #1
    Just burned his ISO
    Join Date
    Jan 2008
    Posts
    6

    Default java password cracker

    hi i made a little java program that asks you to input a password
    then if you type crack it goes through all possible permutations
    using brute force it finds the password

    now i wanted to take it to the next step
    let's say i wanted to make a website that requires a password
    how would i make the java program output the passwords it generates to the website

    is there any way to have it act like i am typing the password into the html field
    or would i have to open a connection in the source code to that ip adress
    and work inside there

  2. #2
    Super Moderator Archangel-Amael's Avatar
    Join Date
    Jan 2010
    Location
    Somewhere
    Posts
    8,012

    Default

    Quote Originally Posted by redmoonzer01 View Post
    hi i made a little java program that asks you to input a password
    then if you type crack it goes through all possible permutations
    using brute force it finds the password

    now i wanted to take it to the next step
    let's say i wanted to make a website that requires a password
    how would i make the java program output the passwords it generates to the website

    is there any way to have it act like i am typing the password into the html field
    or would i have to open a connection in the source code to that ip adress
    and work inside there
    Wouldn't you know this answer better than anyone else since you stated that you made this program?
    To be successful here you should read all of the following.
    ForumRules
    ForumFAQ
    If you are new to Back|Track
    Back|Track Wiki
    Failure to do so will probably get your threads deleted or worse.

  3. #3
    Member wick86's Avatar
    Join Date
    Mar 2010
    Posts
    113

    Default

    Quote Originally Posted by redmoonzer01 View Post
    hi i made a little java program that asks you to input a password
    then if you type crack it goes through all possible permutations
    using brute force it finds the password

    now i wanted to take it to the next step
    let's say i wanted to make a website that requires a password
    how would i make the java program output the passwords it generates to the website

    is there any way to have it act like i am typing the password into the html field
    or would i have to open a connection in the source code to that ip adress
    and work inside there
    This sound very sketchy to me do you own said web site and what lagit use wold it have?

  4. #4
    Senior Member shamanvirtuel's Avatar
    Join Date
    Mar 2010
    Location
    Somewhere in the "Ex" human right country
    Posts
    2,988

    Default

    yes using some utility class it's easy

    Session s = new Session();
    Response r = s.get("https://www.java.net/servlets/TLogin");
    Form form = Forms.getFormById(r, "loginform");
    form.getInput("loginID").setValue(username);
    form.getInput("password").setValue(password);
    r = form.submit(s);

    use this class :
    http://javadesktop.org/swinglabs/bui...orm/Forms.html
    Watch your back, your packetz will belong to me soon... xD

    BackTrack :
    Giving Machine Guns to Monkeys since 2006

  5. #5
    Just burned his ISO
    Join Date
    Jan 2008
    Posts
    6

    Default

    i am not doing anything bad as i said
    i am not that stupid
    i imagine they would record ip and deny access after x ammount of failed logons

    on the other hand i am not that smart and this at first seemed way over my head but eh why not give it a try

    this is just for my own curiosity
    i made a html file with a javascript that has a form that asks for username and password

    i was having trouble trying to figure out how to use java to send data to the forms

    i didn't know if i would have to piece together a http get request or something
    then i saw some stuff about post's
    i figured java had to have some method for this
    it really sucks not having the internet whenever i want
    i need to be online 24/7 to figure this out

    shamanvirtuel: that looks just like what i am looking for
    i'll try that route and see how it goes
    THANKS

  6. #6
    Just burned his ISO
    Join Date
    Jan 2008
    Posts
    6

    Default

    shamanvirtuel... where can i get those packages?

    i looked into those classes you told me about and i had to track down the org.jdesktop.http and html packages then that inturn wanted apache.common.httpclient or something so i got that and now i need org.jdesktop.beans and org.w3c.tidy

    i can find the javadocs for these easy but the actual package download it harder to find for me

    can you point me in the right direction for everything i need to make this work so i can use these classes

  7. #7
    Super Moderator Archangel-Amael's Avatar
    Join Date
    Jan 2010
    Location
    Somewhere
    Posts
    8,012

    Default

    Quote Originally Posted by redmoonzer01 View Post
    i am not doing anything bad as i said
    i am not that stupid
    i imagine they would record ip and deny access after x ammount of failed logons
    Maybe they would. But are you going to? As per your first post in this thread
    Quote Originally Posted by redmoonzer01 View Post
    now i wanted to take it to the next step
    let's say i wanted to make a website that requires a password
    how would i make the java program output the passwords it generates to the website
    So again if it is your website why would you log your own ip address and then block yourself out?
    Just my own curiosity thats all.
    To be successful here you should read all of the following.
    ForumRules
    ForumFAQ
    If you are new to Back|Track
    Back|Track Wiki
    Failure to do so will probably get your threads deleted or worse.

  8. #8
    Just burned his ISO
    Join Date
    Jan 2008
    Posts
    6

    Default

    there is no real use for this except my curiosity
    i simply was wondering about password crackers or how they worked

    since i don't want to attack some random site
    don't want to get in trouble
    and i am sure they would be more sophisticated to handle my n00b attempts

    so i made a simple html page that uses javascript to request a password
    now i was wondering how to send that info via a java program

    it seems it is a pain using just what comes with java
    but people have made classes to do this
    and i am trying to use this one that was referred to me in this post
    i only have one dependency left to get i think
    we'll see lol

    then i can use this
    to send my password permutations

    i dunno this is all very primitive i guess too but eh i wanted to try it out
    oh and no i am not doing any sort of recording ip's and blocking

  9. #9
    Just burned his ISO
    Join Date
    Jan 2008
    Posts
    6

    Default

    so i got all the packages but i wouldn't think i need to change things in them

    however they use variable names that are keywords so i had to change that and now i am getting an error :
    org\w3c\tidy\DOMNodeImpl.java(org\w3c\tidyOMNodeImpl.java):31: org.w3c.tidy.DOMNodeImpl is not abstract and does not override abstract method getUserData(java.lang.String) in org.w3c.dom.Node
    public class DOMNodeImpl implements org.w3c.dom.Node {

    how long ago was this written

    i thought and hoped i could just use these packages w/o any modification

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •