Writing a brute force program using SendKeys.Send

8 Sep 2006 10:46 AM

Senthilkumar

Hi,

I have been using my vb.net for 2 years now, basically for database
application.

I have a client who lost is password for the mimer database and nobody
knows. So assuming if the password is less than 6 chars, i would like to
brute force it. Since this is a new approach for me, i would like to know
how to write a program.

What i found is
I start the program,
send keys to the program,
wait for the result. and then send the keys again.
I just have the program which can send keys from a to z.

But how do i increment the keys from a,b,c,...z,aa,ab,ac,,,az,ba,bb...till
zzzzzz.

Any idea and some sample in vb.net would be very much helpful.

Thanks in advance.

senthilkumar

8 Sep 2006 11:01 AM

rowe_newsgroups

You could increment the ASCII codes and convert them back to "normal"
text with the chr() function. For example:

dim i as integer
dim password as string

for i = 97 to 122
password = chr(i)
next i

This would set the password string = a, then b, then c, then d, ...
through z. Just play with the loop some to get what you require. By the
way asc() is the opposite of chr() - it converts text into its
character code

Thanks,

Seth Rowe

Senthilkumar wrote:
Show quoteHide quote

> Hi,
>
> I have been using my vb.net for 2 years now, basically for database
> application.
>
> I have a client who lost is password for the mimer database and nobody
> knows. So assuming if the password is less than 6 chars, i would like to
> brute force it. Since this is a new approach for me, i would like to know
> how to write a program.
>
> What i found is
> I start the program,
> send keys to the program,
> wait for the result. and then send the keys again.
> I just have the program which can send keys from a to z.
>
> But how do i increment the keys from a,b,c,...z,aa,ab,ac,,,az,ba,bb...till
> zzzzzz.
>
> Any idea and some sample in vb.net would be very much helpful.
>
> Thanks in advance.
>
> senthilkumar

8 Sep 2006 1:33 PM

Spam Catcher

"Senthilkumar" <kes***@yahoo.co.in> wrote in
news:#ztXnLz0GHA.3900@TK2MSFTNGP05.phx.gbl:

> I have a client who lost is password for the mimer database and nobody
> knows. So assuming if the password is less than 6 chars, i would like
> to brute force it. Since this is a new approach for me, i would like
> to know how to write a program.

What DB/app? There are several brute force cracking programs online :-)

9 Sep 2006 3:41 PM

Senthilkumar

Hi,

Its a Mimer 9.2 database. I searched the internet for any such utility, but
couldnt find one. Even Mimer itself says it cant find the password. If you
know anything on these lines, pls let me know.

Senthilkumar

Show quoteHide quote

"Spam Catcher" <spamhoneypot@rogers.com> wrote in message
news:Xns9838613E349D1usenethoneypotrogers@127.0.0.1...
> "Senthilkumar" <kes***@yahoo.co.in> wrote in
> news:#ztXnLz0GHA.3900@TK2MSFTNGP05.phx.gbl:
>
>> I have a client who lost is password for the mimer database and nobody
>> knows. So assuming if the password is less than 6 chars, i would like
>> to brute force it. Since this is a new approach for me, i would like
>> to know how to write a program.
>
> What DB/app? There are several brute force cracking programs online :-)

10 Sep 2006 8:51 PM

Spam Catcher

"Senthilkumar" <kes***@yahoo.co.in> wrote in
news:#InrMVC1GHA.5048@TK2MSFTNGP05.phx.gbl:

> Its a Mimer 9.2 database. I searched the internet for any such
> utility, but couldnt find one. Even Mimer itself says it cant find the
> password. If you know anything on these lines, pls let me know.

Is this database still available on the network? Or via ADO.NET/ODBC?

If it is - a faster (and more reliable) way of cracking might be to attempt
to connect to the server... then submit a username/password combo by
attempting to open a new connection.

10 Sep 2006 9:27 PM

rowe_newsgroups

By the way the ODBC connection string is
"Driver={MIMER};Database=mydb;Uid=myuser;Pwd=mypw;"

(from http://www.connectionstrings.com/)

Thanks,

Seth Rowe

Spam Catcher wrote:
Show quoteHide quote

> "Senthilkumar" <kes***@yahoo.co.in> wrote in
> news:#InrMVC1GHA.5048@TK2MSFTNGP05.phx.gbl:
>
> > Its a Mimer 9.2 database. I searched the internet for any such
> > utility, but couldnt find one. Even Mimer itself says it cant find the
> > password. If you know anything on these lines, pls let me know.
>
> Is this database still available on the network? Or via ADO.NET/ODBC?
>
> If it is - a faster (and more reliable) way of cracking might be to attempt
> to connect to the server... then submit a username/password combo by
> attempting to open a new connection.