Hacking a password letter by letter Bruteforce

[is this posible?] sup fellas, im trying to do this shit but i got some problems like how the heck the script gonna know what the password is, and to sort the characters, you can improve this shit if you want help me how to make this real thanks in advance

Attached: Screenshot_4.png (622x523, 19K)

fuck off

:(

fuck right off

>how do I know what password to compare it to
You need to get the password hash from a leak. And just use Hashcat.

i mean to crack a password without knowing the password or the hash whatever

Fuck off

It doesn't work like that unless the password is in plain text, but at that point just look at the password.

You have to just try logging in. Start with 'a', then 'aa' etc. It's really not a good plan, sorry.

you dont

its not imposible

there is a way but i dont know where to find it

Use crunch instead of reinventing the wheel like an autist.

It's not impossible to brute force a single letter of a password without the password or the hash? Please enlighten us... I've changed teams. I agree with this guy now

>
i knoq there will be an encryptation :v but that can be guessed

This.

You could combine all the computers in Google, Facebook, and Microsoft's data centers and it would still take longer than your lifetime to use that method.

Use dictionary attacks and/or know the exact length of the password and a character or two.

the thing is just find a way to connect with database like sqlmap i guess

>i knoq there will be an encryptation :v but that can be guessed
Different user here. What the fuck are you trying to say?
You're asking how to make a program that compares A to B. Without knowing B. This is really simple.

show me

>show me
Jesus Christ dude when I said it's simple I meant the concept of what you're asking to do, which is clearly impossible. You can't compare two items without knowing one of the items.

You guys are replying to a literal 8 year old or a sub-80 iq retard.

the thing is just find a way to connect with database like sqlmap i guess

so the exploit or the script know the password

is this like hangman or some shit?

something like that but with unlimited lives and with a database

K... so you enter in a letter, if it's correct then we remember whatever that letter is and the number of occurrences it appears in the password (going off of your pic). It should just be a matter of gathering enough letters, then trying every combination of those letters until you get the correct password - am I missing something?

no, and getting all data from a database like hashes or the password in plain text, that depends of the web
something similar to sqlmap

you can't retard, how will you verify say the letter in position 7 is the correct one? You would have to know the answer already, and if you knew the answer then why go through the process?

for the moment i dont know how to sort the characters , you must give it an order

what are you even talking about? "sorting the characters" are you implying you ALREADY know the password you are trying to "brute force"? If not, you can't brute force "character by character" if you don't know what you are comparing against.

Are you saying that you know that you have the correct characters, just not in the right order?

You cannot brute force a single letter of a password. It is all or nothing. Whether you are making repeated login attempts or running the hashing function on your own machine and comparing against an original hash (which you have obtained), you must guess a full password. It is impossible to tell if one letter of the password is right or not because that is not how hashing functions work.

aaaahhhhh you dont understand nothing, i said that the exploit or the script connect to a database like sqlmap, and with that you guess the password letter by letter because the exploit or the script KNOWS the password already but not youuu

just print the password then? what the fuck is this supposed to be

Go read the source code to that script and find out how it knows the password.

what the fuck, so you are not in control of the script? If you have the script, and it knows the password then YOU know the password retard.

very funny thread, can't tell if OP is noob or master cracker baiting everyone, who knows, but the more wheels invented the better

As others have mentioned, you cannot guess passwords this way. Password cracking works on two methods; comparing hashes, or attempting logins. You either have a hash value, hash your plaintext guess,, compare the hases, and output the answer. Otherwise you just send ussrname+passwords at a login form. The only way your example would work is if you knew the password already and it was comparing the guessed char to each position of the already known password. Don't be discouraged tho. Try writing a script that does the Hashing and compare.

what if you cant print the password?

>you don't understand nothing
Lol lrn 2 english

>connect to a database like sqlmap
sqlmap isn't a database

you are 1 guy posting all these shit noob threads aren't you? just fuck off, you can figure out this by using fucking google. also this site is 18+
this

>being the biggest brainlet on Jow Forums

by far too, how is it possible to be this fucking dumb
yoi're probably not even a currynigger but some inbread burger instead

check em

I think the burger has moar brains than a currynigger it has more values at least

1. brute force all the letters in the password using something like includes() on the stored password for each letter and store them in an array
2. randomly sort the array and parse it to a string, check to see if it matches the stored password. Repeated until you have the password. Return the parsed array

Hope this helps OP, it should have O(g(o)d)+killyourself runtime

op what other tech related projects and things you working on/wanting to know? you a win mac or linux user?

If the exploit knows the password then you already have access to the password. At that point there's no reason to brute force the password...

jesus christ OP, delete your post already stop embarrassing yourself...

Typically cracking software uses password lists, is concurrent and utilizes proxies + timers to avoid rate limiting/blacklisting

Nowadays most people use 2-FA meaning you'll need access to an email account or sometimes a phone number... so you have to compromise their phone, clone their SIM or get access to it IRL

What the fuck are you doing

Why ON EARTH are you fags treating this literal 12 year old seriously lmaoing my ass off

Being a 8 year old retard

It's nice that he's doing some scripting, but he's really doing something stupid.

>how the heck the script gonna know what the password is
Not sure why but i lost it to that part, best YLYL in a while.

This is an intractable problem without some form of data to aid you, like a hash.
Have fun, OP!

The multiplicity of arranging any combination of permitted letters any symbols bound by the different permitted lengths of string is HUGE.

Did you not do combinatorics at school?

If it can't print how would you get the password out you just needlessly brute forced

how do you get a hash to compare in the first place?