Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Pen-Test
[Top] [All Lists]

Re: Pentesting Openmail Web login

Subject: Re: Pentesting Openmail Web login
Date: Wed, 23 May 2007 21:51:10 -0400
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


It is not clear what you are asking for, but I will guess you are
looking for a tool to perform brute-force attack against an html form
based login screen.  If that is the case, take a look at Brutus or
C-Force.  THC-Hydra apparently does form based as well, but never tried
it for that.


s-williams@nyc.rr.com wrote:
Anyone have a good tool in mine?
------Original Message------
To: listbounce@securityfocus.com
To: pen-test@securityfocus.com
Sent: May 23, 2007 12:01 PM
Subject: Pentesting Openmail Web login

I am task with testing user accounts on our mail system. We currently have 
two systems Exchange, and OpenMail for Linux which is on the DMZ. We are 
interested in finding out how easy it might be for someone to guess the 
password of one or our users account.

And if the are sucessful what can the do on the linux box, with that username 
and password.

We have a main site with a link to the webmail system from there, ifi want to 
test this which tool might be the best for doing this since its a link and 
not the main page?

Thanks in advance

"A wise man ask questions, a fool is afraid of knowledge"  

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFGVO+OUyOxvUG0pAsRAixLAKCeozYgD9uzVfQ9XD+L5ozWswb/6QCfeRGh
JRFzjOFQX6itEj0edsT8yhE=
=ejNI
-----END PGP SIGNATURE-----

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------

<Prev in Thread] Current Thread [Next in Thread>