What is Brute Force

2020-07-23T14:51:00.002+05:30

What is Bruce Force Attack

Hello guys in this post We talk about Brute Force Attack let’s start..

What's a Brute Force Attack?

A brute force attack uses trial-and-error to guess login info, encryption keys, or find a hidden web page. Hackers work through all possible combinations hoping to guess correctly. It is a cyber attack equivalent, this attack tries every key on your key ring (passwords List)

These attacks are done by ‘brute force’ meaning they use excessive forceful attempts to try and ‘force’ their way into your private accounts

This is an old attack method, but it's still effective and popular with hackers. Because depending on the length and complexity of the password, cracking it can take anywhere from a few seconds to many years.

What do hackers gain from Brute Force Attacks?

Brute force attackers have to put in a bit of effort to make these schemes pay off. While technology does make it easier, you might still question: why would someone do this?

Goals of a brute force attack include:

1. Theft of personal information such as passwords, passphrases and other information used to access online accounts and network resources.

2. Harvesting credentials to sell to third parties.

3. Posing as users to send phishing links or spread fake content.

4. Defacement of websites and other information in the public domain that could damage the reputation of the organization.

5. Redirecting domains to sites holding malicious content.

An attacker is usually aided by automated software that uses computing to systematically check password combinations until the correct one is identified. Using a brute force password cracking application is required in order to go through numerous combinations and possibilities that can be difficult or impossible to calculate by a human alone. Popular examples of brute force attack tools include:

· Aircrack-ng

· AdvPhishing

HiddenEye

· RainbowCrack, and So on

Types of Brute Force Attack

There are a number of different types of brute force attack, each of which has the same goals detailed above.

Hybrid Brute Force Attacks

You may have heard of dictionary attacks. These are one of the most common forms of brute force attack and use a list of words in a dictionary to crack passwords. Other types of attack may use a list of commonly used passwords. If your password is 'password', for example, a brute force bot would be able to crack your password within seconds.

Reverse Brute Force Attack

Reverse brute force attacks don't target a specific username, but instead, use a common group of passwords or an individual password against a list of possible usernames.

Credential Stuffing

When a username and password pairing is known by the attacker, they can use this information to gain access to multiple websites and network resources. For example, many users choose the same password to access many different websites for the sake of simplicity. Taking precautions like using two-factor authentication and using different passwords for every different network resources can help to prevent brute force attacks that rely on credential stuffing.

What is Ngrok

2020-07-23T13:42:00.007+05:30

What is ngrok?

Hello, friends in this post I will tell you what is the ngrok? What is the use of ngrok? And last I will tell you the steps to use ngrok in Android devices.

So let’s start...

What is ngrok?

ngrok is a cross-platform application that enables developers to expose a local development server to the Internet with minimal effort. This software makes your locally-hosted web server appear to be hosted on a subdomain of ngrok.com, meaning that no public IP or domain name on the local machine is needed. Similar functionality can be achieved with Reverse SSH Tunneling, but this requires more setup as well as hosting of your own remote server.

By default, ngrok creates both HTTP and HTTPS endpoints, making it useful for testing integrations with third-party services or

APIs that require valid SSL/TLS domains. Other use cases include: quickly showcasing local demos to clients, testing mobile application backends, and running personal cloud services from your home PC.

One praised feature of ngrok is the ability to track and replay HTTP requests via ngrok's web console (accessible on http://127.0.0.1:4040/). The replay functionality is highly useful when testing API calls or webhooks as one can easily inspect all header content and request/response data in one place via the console UI.

How to use it with Android Mobile

First download and install Termux link is here.

Go to ngrok website and download www.ngrok.com.

Type: cp -r (path where to copy from) $HOME

For activating ngrok Type :

./ngrok authtoken <your athutoken>

Goto ngrok dashboard and copy you authtoken

Now Type : ./ngrok help

It will show you the help menu of the program.

Make sure for run this program you have to open your mobile hotspot first otherwise it will show you error..

./ngrok http 8080(Port)

Now here we go.....

If face any problem then contact me. You can also watch video guide step by step in my YouTube Channel Here is the link.

MonsterTech97

What is Brute Force

Types of Brute Force Attack

What is Ngrok

How to use it with Android Mobile