Password Hacking/Cracking - GoFuckYourself.com

Mutt · 02-05-2011, 10:20 AM

the last few days Password Sentry has been suspending usernames like crazy, way above normal. i haven't paid attention to the password scene in years, back then most of the u/p's were cracked/guessed by brute attacks with wordlists of common usernames and passwords.

i noticed a thread on here not long ago where a guy said that's old technology now to these guys, that they now use password sniffing software. how does password sniffing work?
and is there anything I can do to defend against it?

Jack Sparrow · 02-05-2011, 10:24 AM

Best defense is removing gfy signatures that are bigger then allowed.

alias · 02-05-2011, 10:24 AM

What sig?

Machete_ · 02-05-2011, 10:28 AM

seriously, fuck off with your huge ass sig

Tam · 02-05-2011, 10:31 AM

The software works like any other software that does as it is supposed to do. You input sites that are password protected and the criteria asked for in them, as each one is different and then you start it and let it run, it'll output passwords that are valid at the time it hit that site in the criteria set... it'll be valid until it is killed by you.... that's about the long and short of it.

Barefootsies · 02-05-2011, 10:33 AM

Quote:

Originally Posted by Jack Sparrow

Best defense is removing gfy signatures that are bigger then allowed.

SmokeyTheBear · 02-05-2011, 10:41 AM

several ways to "sniff" passwords , you can set up a wireless network to spy on users, basic keyloggers, proxies, trojaned computers, etc etc

Mutt · 02-05-2011, 10:41 AM

Quote:

Originally Posted by Machete_

seriously, fuck off with your huge ass sig

seriously, fuck off with new nicknames when nobody noticed your drivel under the old one

get a room with mrfrisky and smell it up with the stench of ass

Mutt · 02-05-2011, 10:42 AM

Quote:

Originally Posted by SmokeyTheBear

several ways to "sniff" passwords , you can set up a wireless network to spy on users, basic keyloggers, proxies, trojaned computers, etc etc

but what's the most common method used these days by the password crowd on IRC and the web?

Robbie · 02-05-2011, 10:49 AM

Most common is that a server has been compromised in my opinion.

The password file is then there for the taking (or the NATS database depending on what you have).

I was talking to John Scarpa at Swiftwill and he told me that every server that has been moved over to them is gone through by his team, and every one of them had been compromised. EVERY one of them!

That was pretty shocking to me.

I've also found that a lot of people don't have secure email.
I use phantomfrog to catch and stop all that password abuse, and when I see a particular person's user/pass getting slammed constantly, I contact them. I tell them to change their email password and that usually stops their user/pass from being abused instantly.

Had a lot of members thank me profusely for showing them that their email account had been hacked...

woj · 02-05-2011, 11:06 AM

Quote:

Originally Posted by Mutt

seriously, fuck off with new nicknames when nobody noticed your drivel under the old one

get a room with mrfrisky and smell it up with the stench of ass

those animated gifs are 15MB, the girls are hot, but don't be stupid dude...

Mutt · 02-05-2011, 11:09 AM

Quote:

Originally Posted by woj

those animated gifs are 15MB, the girls are hot, but don't be stupid dude...

woj are you on dialup?

DBS.US · 02-05-2011, 11:26 AM

Quote:

Originally Posted by woj

those animated gifs are 15MB, the girls are hot, but don't be stupid dude...

Ask your roommates to kick in a few bucks each a get high speed internet

amateurbfs · 02-05-2011, 11:35 AM

Quote:

Originally Posted by Mutt

woj are you on dialup?

Have some respect for the rules.

BV · 02-05-2011, 11:37 AM

Quote:

Originally Posted by Mutt

woj are you on dialup?

No, Woj is on DSL, but he usually has a bunch of Gay Twink & Tranny torrents downloading.

Mickey Mouse · 02-05-2011, 11:44 AM

Email security is so important yet so few people even realize it. Gmail does a great job and always has with their SSL and they have many other minor features implemented to help prevent people from getting your password and if they do you can check the logs and should be able find out. Picking good passwords is also important. Not using the same password also helps as if they get one, many people will try the same password at other sites--including your email as so many people are too lazy to use different passwords. If remembering passwords is a chore for you try 1Password (if you are on a Mac).

Never use anyone else's computer and stay far far away from any Internet cafe as you can probably assume they're collecting your info. Use a VPN if using wifi if you are really concerned.

Yet I think your questions are more about your server. Make sure the location of you file is below your public files. You might wanna change your site/server passwords if you haven't done so in awhile as maybe someone has access. Password Sentry I think has an anti- bruit force plugin so check into that. I hear they're coming out with a major upgrade for that soon and I'm looking forward to learning what neat features it has built in.

Sniffing isn't something you can do much about as it's mostly on your customers end, but I'd doubt that's a major issue with people getting endless amounts of your passwords. I would say check your password file location, change your passwords, and look into bruit force prevention by checking the PS plugin.

Oh, one last thing, consider getting a monthly subscription to a security company. I use a company which for just $100 a month they make sure my sever is secure and they monitor it 24/7 and will handle issues and alert me when there is a problem. I also check with them first before installing different programs to make sure I am not creating a security hole--a few times they've even warned me against some programs and suggested more secure options and they'll even install them for me at no extra costs if I want.

DWB · 02-05-2011, 11:54 AM

Quote:

Originally Posted by Mickey Mouse

Oh, one last thing, consider getting a monthly subscription to a security company. I use a company which for just $100 a month they make sure my sever is secure and they monitor it 24/7 and will handle issues and alert me when there is a problem. I also check with them first before installing different programs to make sure I am not creating a security hole--a few times they've even warned me against some programs and suggested more secure options and they'll even install them for me at no extra costs if I want.

Who are you using?

gleem · 02-05-2011, 12:30 PM

Wierd thing is I've had whole blocks of passes stolen that are billed by epoch or netbilling but almost never the other 5 billers & gateways I have. So basically when you have 3rd party or gateway billers for your merch, you gotta worry about their security practices too.

I use securitymetrics.com to keep my nats servers PCI compliant which I'm hoping is enough to detect the nasties in addition to the host setups. If there is something better I'd love to hear!

Mr Happy · 02-05-2011, 01:04 PM

Try PhantomFrog.com Not only does it work great, it detects multipul IP's and changes passwords as soon as it detects passwords used from multi IP's.

It also allows you to limit how much content the user downloads.

http://PhantomFrog.com

gaffg · 02-05-2011, 01:18 PM

interesting security discussion

MasterM · 02-05-2011, 01:26 PM

1) are all nats own servers 100% ok ?
2) are your servers exploitable ?
3) get proxypass or phantomfrog

TeenCat · 02-05-2011, 01:29 PM

some billers are complete hacked, usernames, passwords, emails, ccs and so ... then its not hard to make fresh combolist or to get into members emails ... there will be always alot of people trying their best to get somewhere, always, and its sad but they are and always will be mostly succesful

Jack Sparrow · 02-05-2011, 02:04 PM

Does eric approve with wayyy to big sigs nowadays?

Agent 488 · 02-05-2011, 02:18 PM

who cares how big a sig is? get a life.

Jack Sparrow · 02-05-2011, 02:25 PM

You cared in the other thread, now you dont? Is your bot failing

jk

TeenCat · 02-05-2011, 02:26 PM

or get a date in mexico

Machete_ · 02-05-2011, 02:33 PM

links pulled

seeandsee · 02-05-2011, 02:56 PM

only protection total is to unplug it

TCLGirls · 02-05-2011, 06:51 PM

Quote:

Originally Posted by Jack Sparrow

Does eric approve with wayyy to big sigs nowadays?

You're complaining about two smoking hot chicks kissing each other?

LOL you know how I know you're gay?

Angry Jew Cat - Banned for Life · 02-05-2011, 09:52 PM

I'd listen to the guy who has hundreds of cracked GFY usernames...

There's still people using AccessDiver

gmr324 · 02-07-2011, 04:13 PM

Thanks for mentioning PhantomFrog Robbie, Mr. Happy and MasterM

Whether passwords are compromised as a result of sniffing software, email intrusion, server intrusion or brute force attacks, the main priority should be detecting the password abuse and ending the cycle of abuse on the first unauthorized attempt.

PhantomFrog has the most accurate and advanced password abuse detection via our exclusive Hi-Res Geo-IP pass abuse detection feature. Making a webmaster's life even easier is what our Automated Member Support (AMS) feature does by providing 24/7 uninterrupted access to paying members and none to hackers. This is all accomplished without the intervention of the webmaster freeing them up to do more important work like
content development and site promotion. PhantomFrog also provides Bandwidth Abuse and Brute Force Attack Protection features rounding out the premium protection that we offer for your sites and your members.

Click Here To Learn More About PhantomFrog

Click Here To Install Our Free Trial

Many Thanks

George

fris · 02-07-2011, 04:41 PM

most of the people use a dictionary list, and have it running all day with proxies until it cracks them.

depends if you have a popup password (htaccess) or not.

ladida · 02-07-2011, 06:48 PM

Quote:

Originally Posted by fris

most of the people use a dictionary list, and have it running all day with proxies until it cracks them.

Noone does this

Quote:

depends if you have a popup password (htaccess) or not.

Does not matter.

d-null · 02-07-2011, 10:21 PM

Quote:

Originally Posted by ladida

Noone does this

.

yes, some people do do this, recently I had a site under attack for weeks in that exact way

MrDeiz · 02-08-2011, 03:45 AM

Quote:

Originally Posted by TeenCat

some billers are complete hacked, usernames, passwords, emails, ccs and so ... then its not hard to make fresh combolist or to get into members emails ... there will be always alot of people trying their best to get somewhere, always, and its sad but they are and always will be mostly succesful

sire, can i have gfy biller combo list sire?

mgtarheels · 02-08-2011, 03:47 AM

hey asshole, look on the first page of google for password sniffing software.

Look for the page titled:
What Is Password Sniffing?

ladida · 02-08-2011, 05:06 AM

Quote:

Originally Posted by d-null

yes, some people do do this, recently I had a site under attack for weeks in that exact way

No you didn't. Because they don't have enough proxies for that, and because all would get blocked very soon. Unless you have absolutely no protection at all and you're not even checking for ip so they can do it from 1 ip.
So again, noone does that. You probably had something else happen but you have no idea what, and your hosting/whoever just muttered up some excuse for a messup, or didn't want to explain to you what happened.

fris · 02-08-2011, 09:48 AM

Quote:

Originally Posted by ladida

Noone does this

Does not matter.

accessdiver thats how most of the password sites get them.

MasterM · 02-08-2011, 11:12 AM

accessdiver , goldeneye . and the better ones use : HAS , for £HAS_Command

ArsewithClass · 02-08-2011, 11:34 AM

Today & yesterday we have also had our Strongbox program banged at... We used to have a problem with password hackers every few months. Since getting strongbox, Ive had little problems but too many strongbox emails. I suppose, proving Strongbox works well

fris · 02-08-2011, 02:18 PM

ya strongbox is a good solution, people that sitll use pennywize should be shot in the head or any htaccess method.

MasterM · 02-08-2011, 03:52 PM

strongbox protected sites are not as protected as proxypass protected sites.

d-null · 02-08-2011, 04:10 PM

Quote:

Originally Posted by ladida

No you didn't. Because they don't have enough proxies for that, and because all would get blocked very soon. Unless you have absolutely no protection at all and you're not even checking for ip so they can do it from 1 ip.
So again, noone does that. You probably had something else happen but you have no idea what, and your hosting/whoever just muttered up some excuse for a messup, or didn't want to explain to you what happened.

you are wrong again

I am my own management, and I personally looked at the logs of the 24 hour a day attempts on brute forcing the passwords, and I also personally banned the ips of the proxies they were using (they were using a lot). Anyways, they easily have enough proxies for that if the site admin doesn't bother to notice that they are doing it.

rowan · 02-08-2011, 07:36 PM

Quote:

Originally Posted by gleem

Wierd thing is I've had whole blocks of passes stolen that are billed by epoch or netbilling but almost never the other 5 billers & gateways I have. So basically when you have 3rd party or gateway billers for your merch, you gotta worry about their security practices too.

Possibly related, I get spam sent to a unique email address I used for signing up to a few ccbill paysites. I don't know if it was the paysites or ccbill that were compromised.

I know there's been a few threads over the years with people offering billing records, probably wouldn't take much for an employee to quietly take a copy for themselves home...

ladida · 02-08-2011, 08:43 PM

Quote:

Originally Posted by fris

accessdiver thats how most of the password sites get them.

Quote:

Originally Posted by fris

ya strongbox is a good solution, people that sitll use pennywize should be shot in the head or any htaccess method.

Wow, you live in the 90's. Accessdiver rofl. "htaccess method" wtf rofl. Yea, it mattered is it "htaccess" or "form" when you were in 90s using accessdiver. Get with the program. Strongbox is horrible, so is pennywize.

Quote:

Originally Posted by MasterM

accessdiver , goldeneye . and the better ones use : HAS , for £HAS_Command

Rofla@goldeneye, that's even worse then accessdiver.
Has is not a bruteforcer, shouldn't pretend something you aren't with explot naming tools.

Quote:

Originally Posted by d-null

you are wrong again
I am my own management, and I personally looked at the logs of the 24 hour a day attempts on brute forcing the passwords, and I also personally banned the ips of the proxies they were using (they were using a lot). Anyways, they easily have enough proxies for that if the site admin doesn't bother to notice that they are doing it.

I'm not wrong. I fear for your "management" if that is what you banned.
a) They dont have infinite proxies. Actually they have them very little lately (compared to 90s when certain people last read "how to crack" tutors)
b) they dont run bots all day long because that's stupid for a number of reasons i already pointed out.
And just the notion you have to "personally ban ips they were using" means you dont have ip check for a number of tries on your login. Which in turn means they dont have to use proxies and can brute from 1 ip until you personally ban it again. They're smart enough to notice you're not banning proxies automatically and would not waste them in vain against such poor protection.

02-05-2011, 10:20 AM	#1
Mutt Too lazy to set a custom title Industry Role: Join Date: Sep 2002 Posts: 34,431	Password Hacking/Cracking the last few days Password Sentry has been suspending usernames like crazy, way above normal. i haven't paid attention to the password scene in years, back then most of the u/p's were cracked/guessed by brute attacks with wordlists of common usernames and passwords. i noticed a thread on here not long ago where a guy said that's old technology now to these guys, that they now use password sniffing software. how does password sniffing work? and is there anything I can do to defend against it? __________________ I moved my sites to Vacares Hosting. I've saved money, my hair is thicker, lost some weight too! Thanks Sly!

02-05-2011, 10:24 AM	#3
alias aliasx Join Date: Apr 2001 Posts: 19,010	What sig? __________________ https://porncorporation.com

02-05-2011, 10:31 AM	#5
Tam Confirmed User Industry Role: Join Date: Jan 2001 Location: In your face Posts: 8,484	The software works like any other software that does as it is supposed to do. You input sites that are password protected and the criteria asked for in them, as each one is different and then you start it and let it run, it'll output passwords that are valid at the time it hit that site in the criteria set... it'll be valid until it is killed by you.... that's about the long and short of it. __________________ "Want to get listed on The Porn Map? Email [email protected] or message me on Skype (TamboSpr)!"

02-05-2011, 10:41 AM	#7
SmokeyTheBear ►SouthOfHeaven Join Date: Jun 2004 Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer Posts: 28,609	several ways to "sniff" passwords , you can set up a wireless network to spy on users, basic keyloggers, proxies, trojaned computers, etc etc __________________ hatisblack at yahoo.com

02-05-2011, 10:49 AM	#10
Robbie Leaner, Meaner, Faster Industry Role: Join Date: Aug 2002 Location: Vegas Posts: 20,959	Most common is that a server has been compromised in my opinion. The password file is then there for the taking (or the NATS database depending on what you have). I was talking to John Scarpa at Swiftwill and he told me that every server that has been moved over to them is gone through by his team, and every one of them had been compromised. EVERY one of them! That was pretty shocking to me. I've also found that a lot of people don't have secure email. I use phantomfrog to catch and stop all that password abuse, and when I see a particular person's user/pass getting slammed constantly, I contact them. I tell them to change their email password and that usually stops their user/pass from being abused instantly. Had a lot of members thank me profusely for showing them that their email account had been hacked... __________________ -Robbie ClaudiaMarie.Com

02-05-2011, 10:24 AM	#2
Jack Sparrow Almost goners.. Industry Role: Join Date: May 2008 Location: Netherlands Posts: 11,420	Best defense is removing gfy signatures that are bigger then allowed.

02-05-2011, 10:28 AM	#4
Machete_ WINNING! Industry Role: Join Date: Oct 2002 Posts: 14,579	seriously, fuck off with your huge ass sig

02-05-2011, 11:44 AM	#16
Mickey Mouse Confirmed User Industry Role: Join Date: Apr 2006 Posts: 104	Email security is so important yet so few people even realize it. Gmail does a great job and always has with their SSL and they have many other minor features implemented to help prevent people from getting your password and if they do you can check the logs and should be able find out. Picking good passwords is also important. Not using the same password also helps as if they get one, many people will try the same password at other sites--including your email as so many people are too lazy to use different passwords. If remembering passwords is a chore for you try 1Password (if you are on a Mac). Never use anyone else's computer and stay far far away from any Internet cafe as you can probably assume they're collecting your info. Use a VPN if using wifi if you are really concerned. Yet I think your questions are more about your server. Make sure the location of you file is below your public files. You might wanna change your site/server passwords if you haven't done so in awhile as maybe someone has access. Password Sentry I think has an anti- bruit force plugin so check into that. I hear they're coming out with a major upgrade for that soon and I'm looking forward to learning what neat features it has built in. Sniffing isn't something you can do much about as it's mostly on your customers end, but I'd doubt that's a major issue with people getting endless amounts of your passwords. I would say check your password file location, change your passwords, and look into bruit force prevention by checking the PS plugin. Oh, one last thing, consider getting a monthly subscription to a security company. I use a company which for just $100 a month they make sure my sever is secure and they monitor it 24/7 and will handle issues and alert me when there is a problem. I also check with them first before installing different programs to make sure I am not creating a security hole--a few times they've even warned me against some programs and suggested more secure options and they'll even install them for me at no extra costs if I want. __________________ I'm not a pornographer, I'm an ARTIST! Currently traveling southeast Asia shooting Asian girl and ladyboy content. e-mail: support [at] baregirls . com

02-05-2011, 12:30 PM	#18
gleem Confirmed User Industry Role: Join Date: Jun 2001 Location: Sunny Land Posts: 5,593	Wierd thing is I've had whole blocks of passes stolen that are billed by epoch or netbilling but almost never the other 5 billers & gateways I have. So basically when you have 3rd party or gateway billers for your merch, you gotta worry about their security practices too. I use securitymetrics.com to keep my nats servers PCI compliant which I'm hoping is enough to detect the nasties in addition to the host setups. If there is something better I'd love to hear! __________________ Contact me: \\// E: webmaster /at/ unprofessional.com

02-05-2011, 01:04 PM	#19
Mr Happy So Fucking Banned Industry Role: Join Date: Feb 2010 Location: LMFAO Posts: 485	Try PhantomFrog.com Not only does it work great, it detects multipul IP's and changes passwords as soon as it detects passwords used from multi IP's. It also allows you to limit how much content the user downloads. http://PhantomFrog.com Last edited by Mr Happy; 02-05-2011 at 01:08 PM..

02-05-2011, 01:18 PM	#20
gaffg Confirmed User Industry Role: Join Date: Jan 2010 Location: Online Posts: 717	interesting security discussion __________________ http://gaffg.com/affiliate-programs/ Find all gambling affiliate programs based on categories: casino, poker, sportsbetting, bingo, mobile. Find forex and binary options affiliate programs. Listed by revenue share, CPA and sub affiliate commission.

02-05-2011, 01:26 PM	#21
MasterM Confirmed User Join Date: Oct 2002 Location: netherlands Posts: 248	1) are all nats own servers 100% ok ? 2) are your servers exploitable ? 3) get proxypass or phantomfrog

02-05-2011, 01:29 PM	#22
TeenCat Too lazy to set a koala Industry Role: Join Date: Jan 2007 Location: CZ/EU forever! Posts: 16,139	some billers are complete hacked, usernames, passwords, emails, ccs and so ... then its not hard to make fresh combolist or to get into members emails ... there will be always alot of people trying their best to get somewhere, always, and its sad but they are and always will be mostly succesful __________________ 6bot / Coming again very soon! Svit Zlin Radio 24/7!

02-05-2011, 02:04 PM	#23
Jack Sparrow Almost goners.. Industry Role: Join Date: May 2008 Location: Netherlands Posts: 11,420	Does eric approve with wayyy to big sigs nowadays?

02-05-2011, 02:18 PM	#24
Agent 488 Registered User Industry Role: Join Date: Feb 2006 Posts: 22,511	who cares how big a sig is? get a life.

02-05-2011, 02:25 PM	#25
Jack Sparrow Almost goners.. Industry Role: Join Date: May 2008 Location: Netherlands Posts: 11,420	You cared in the other thread, now you dont? Is your bot failing jk

02-05-2011, 02:26 PM	#26
TeenCat Too lazy to set a koala Industry Role: Join Date: Jan 2007 Location: CZ/EU forever! Posts: 16,139	or get a date in mexico __________________ 6bot / Coming again very soon! Svit Zlin Radio 24/7!

02-05-2011, 02:33 PM	#27
Machete_ WINNING! Industry Role: Join Date: Oct 2002 Posts: 14,579	links pulled

02-05-2011, 02:56 PM	#28
seeandsee Check SIG! Industry Role: Join Date: Mar 2006 Location: Europe (Skype: gojkoas) Posts: 50,945	only protection total is to unplug it __________________ BUY MY SIG - 50$/Year Contact here

02-05-2011, 09:52 PM	#30
Angry Jew Cat - Banned for Life (felis madjewicus) Industry Role: Join Date: Jul 2006 Location: In Mom & Dad's Basement Posts: 20,368	I'd listen to the guy who has hundreds of cracked GFY usernames... There's still people using AccessDiver

02-07-2011, 04:13 PM	#31
gmr324 Confirmed User Industry Role: Join Date: Aug 2006 Posts: 1,199	Thanks for mentioning PhantomFrog Robbie, Mr. Happy and MasterM Whether passwords are compromised as a result of sniffing software, email intrusion, server intrusion or brute force attacks, the main priority should be detecting the password abuse and ending the cycle of abuse on the first unauthorized attempt. PhantomFrog has the most accurate and advanced password abuse detection via our exclusive Hi-Res Geo-IP pass abuse detection feature. Making a webmaster's life even easier is what our Automated Member Support (AMS) feature does by providing 24/7 uninterrupted access to paying members and none to hackers. This is all accomplished without the intervention of the webmaster freeing them up to do more important work like content development and site promotion. PhantomFrog also provides Bandwidth Abuse and Brute Force Attack Protection features rounding out the premium protection that we offer for your sites and your members. Click Here To Learn More About PhantomFrog Click Here To Install Our Free Trial Many Thanks George

02-07-2011, 04:41 PM	#32
fris Too lazy to set a custom title Industry Role: Join Date: Aug 2002 Posts: 55,359	most of the people use a dictionary list, and have it running all day with proxies until it cracks them. depends if you have a popup password (htaccess) or not. __________________ Since 1999: 69 Adult Industry awards for Best Hosting Company and professional excellence. WP Stuff

02-08-2011, 03:47 AM	#36
mgtarheels Confirmed User Industry Role: Join Date: Mar 2010 Location: Daytona Beach, FL Posts: 1,317	hey asshole, look on the first page of google for password sniffing software. Look for the page titled: What Is Password Sniffing?

02-08-2011, 11:12 AM	#39
MasterM Confirmed User Join Date: Oct 2002 Location: netherlands Posts: 248	accessdiver , goldeneye . and the better ones use : HAS , for £HAS_Command

02-08-2011, 11:34 AM	#40
ArsewithClass So Fucking Banned Industry Role: Join Date: Mar 2007 Location: UK Posts: 7,957	Today & yesterday we have also had our Strongbox program banged at... We used to have a problem with password hackers every few months. Since getting strongbox, Ive had little problems but too many strongbox emails. I suppose, proving Strongbox works well

02-08-2011, 02:18 PM	#41
fris Too lazy to set a custom title Industry Role: Join Date: Aug 2002 Posts: 55,359	ya strongbox is a good solution, people that sitll use pennywize should be shot in the head or any htaccess method. __________________ Since 1999: 69 Adult Industry awards for Best Hosting Company and professional excellence. WP Stuff

02-08-2011, 03:52 PM	#42
MasterM Confirmed User Join Date: Oct 2002 Location: netherlands Posts: 248	strongbox protected sites are not as protected as proxypass protected sites.