Sebastián,

2009/3/10 Sebastián Bortnik <[email protected]>:
> Dears,
>
> I was using the bruteforce plugins (basicAuthBrute and formAuthBrute).
>
> They use the files users.txt and passwords.txt located at
> core/controllers/bruteforce directory.
>
> I think the passwords.txt file is too short, so I suggest to add the
> passwords listed by Microsoft here (Analysis tab):
> http://www.microsoft.com/security/portal/Entry.aspx?Name=Worm%3aWin32%2fConficker.B
>
> I think it is a good list and the results will be better.
>
> I compared the two lists and this are the only passwords in the w3af file
> that must be added to the Microsoft list:
> 123pass, 123password, abc, abc1234, abcd, abcd1234, abcde, administration,
> data, db, dbpass, passdb.
>
> I attached the file as I left it.

Thank you for your contribution! I just added your file to the trunk!

Cheers,

> Cheers,
>
> --
> Sebastián Bortnik
> http://unmundobinario.com
>
> ________________________________
> Yahoo! Cocina
> Recetas prácticas y comida saludable
> Visitá http://ar.mujer.yahoo.com/cocina/
> ------------------------------------------------------------------------------
>
> _______________________________________________
> W3af-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/w3af-users
>
>



-- 
Andrés Riancho
http://www.bonsai-sec.com/
http://w3af.sourceforge.net/

------------------------------------------------------------------------------
Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are
powering Web 2.0 with engaging, cross-platform capabilities. Quickly and
easily build your RIAs with Flex Builder, the Eclipse(TM)based development
software that enables intelligent coding and step-through debugging.
Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com
_______________________________________________
W3af-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/w3af-users

Reply via email to