[QUESTION] Brute forcing into a VPS

lux · 10-13-2013, 02:18 AM

So the title explains it all. Does anyone have tips/ideas/tutorials on how I should go about this?

Ignore my ignorance and 'noobiness'

Ominous · 10-13-2013, 02:20 AM

Find the SSH username, usually root, then try brute forcing the pass via some weird ass tool that's probably in Backtrack.

Good luck.

Cyanide and Cynicism · 10-13-2013, 02:21 AM

I'd recommend making something that changes uses Tor and changes nodes every time you get kicked/banned from the server.

Otherwise, have fun dealing with fail2ban!

lux · 10-13-2013, 02:36 AM

(10-13-2013, 02:20 AM)Ominous Wrote: Find the SSH username, usually root, then try brute forcing the pass via some weird ass tool that's probably in Backtrack.

Good luck.

Got any hardware suggestions? Like just leave my desktop PC running it, get a server to do it, or?...

lux · 10-13-2013, 01:48 PM

Bump, need to know about this ASAP

Eclipse · 10-13-2013, 01:54 PM

I hate brute-forcing. Takes the mik. Good luck though. I would say get a server to do it though, unless you want to keep your PC running for ages and not have a 100% chance of success.

lux · 10-13-2013, 02:02 PM

(10-13-2013, 01:54 PM)Sparks Wrote: I hate brute-forcing. Takes the mik. Good luck though. I would say get a server to do it though, unless you want to keep your PC running for ages and not have a 100% chance of success.

Yeah I hate it too :/ Browsed the site for vulns and can't seem to find any yet...

Crypt · 11-17-2013, 06:03 PM

What kind of VPS are you talking about? Windows or Linux? For windows the default name is either admin or administrator and for linux I'm pretty sure it's root. Before trying to bruteforce a windows vps you should see if it's unpatched or not, there's a samba exploit in metasploit that can be used to hack and gain full access to the system but I'm not going to explain all of that, look it up if you wish to know what it is.

Adorapuff · 11-17-2013, 06:14 PM

(11-17-2013, 06:03 PM)Crypt Wrote: What kind of VPS are you talking about? Windows or Linux? For windows the default name is either admin or administrator and for linux I'm pretty sure it's root. Before trying to bruteforce a windows vps you should see if it's unpatched or not, there's a samba exploit in metasploit that can be used to hack and gain full access to the system but I'm not going to explain all of that, look it up if you wish to know what it is.

That vuln is shit. Has a shitty unpatch rate.

Dyme · 11-17-2013, 07:18 PM

(11-17-2013, 06:03 PM)Crypt Wrote: What kind of VPS are you talking about? Windows or Linux? For windows the default name is either admin or administrator and for linux I'm pretty sure it's root. Before trying to bruteforce a windows vps you should see if it's unpatched or not, there's a samba exploit in metasploit that can be used to hack and gain full access to the system but I'm not going to explain all of that, look it up if you wish to know what it is.

LOLLOLOLOLOLOL

If you're talking about the fucking ms08 netapi exploit that every skid shows in "h0w to h4ck any cumputee with metasploitz" tutorials... I'll give you $500 if you find a computer in the wild that is vulnerable to it.