Which program you can recommend?

OOooop, i dont hate form@, it's very useful (collecting form action, very accurate!!!)

I go some aboard, in asia, accessdiver is a most wanted tool!!! But i myself thought that tool sometimes lost hits...!

Very funny to know that when try with C-Force, Sentry and reading tut Golden Eye. 3 tools have enable fingerprinting (so you can respect hit not a fake )

in fact, i like access diver but have not got any hit yet, it seems work well.. i do not know much about another program, just ill try, maybe i can good cracker with trying some program, if it is not, i will leave it immediately :)

Originally Posted by there

in fact, i like access diver but have not got any hit yet, it seems work well.. i do not know much about another program, just ill try, maybe i can good cracker with trying some program, if it is not, i will leave it immediately :)

Just adding my 2 cents... I have been playing around with AD Form@ and a few other popular progs to test form security and I really believe it has a lot to do more with the understanding of what each site you hit is vulnerable to and the prepped tools (wordlists, proxy's and configuration of the app) needed for those sites than just actually having the app to test. I have been doing my damndest to understand what the hell each app can do, how to whittle down and filter wordlists to be more efficient and narrow down my proxies and I gotta tell all of you on that same road, it is not always a walk in the park. Respect goes out to those of you it comes naturally. I get my fair share of success, but nothing compared to the barrage of contributors on this site, let alone the other sites. I don't know if I ever want to dedicate that much time to being a cracker, but I am at this for a few hours everyday just to understand this stuff [the computer all night testing].

If I gave up on a prog after I failed several times, I would have hung up my hat back in 1984 when I had problems copying Summer Games onto a floppy! (5 1/2" by the way!)


808

[thchog]

Originally Posted by Secure808

Just adding my 2 cents... I have been playing around with AD Form@ and a few other popular progs to test form security and I really believe it has a lot to do more with the understanding of what each site you hit is vulnerable to and the prepped tools (wordlists, proxy's and configuration of the app) needed for those sites than just actually having the app to test. I have been doing my damndest to understand what the hell each app can do, how to whittle down and filter wordlists to be more efficient and narrow down my proxies and I gotta tell all of you on that same road, it is not always a walk in the park. Respect goes out to those of you it comes naturally. I get my fair share of success, but nothing compared to the barrage of contributors on this site, let alone the other sites. I don't know if I ever want to dedicate that much time to being a cracker, but I am at this for a few hours everyday just to understand this stuff [the computer all night testing].

If I gave up on a prog after I failed several times, I would have hung up my hat back in 1984 when I had problems copying Summer Games onto a floppy! (5 1/2" by the way!)


808

You got that right, I was lazy the last week or so, just randomly chose wordlists for any site and did not pre-test proxy, left codeen and planetlabs, got maybe 4 hits on 4 runs, talking like 4x5k combo's.

Last night took the time to combine all the WL, redefine them appropriate to my target waited hours until I had 350 nice pre-tested proxy and had over 30 hits in 3000 combos and maybe 100 proxy before I stopped. Granted it was a REAL basic and easy target, I got nothing the week before without proper preperation.