Why Isn't a Timer Capable of Preventing Brute Force

• THC-Archive

  5 658 2.5 HTML

  All releases of the security research group (a.k.a. hackers) The Hacker's Choice

  

It is possible to brute force logins online, using something like Hydra, but many site already lockout an IP address after X failed login attempts.

• john

  77 9,428 9.4 C

  John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs

  

However, most credential brute forcing takes place offline against a leaked database from some site. A program like John the Ripper is used to try hashing each word in a dictionary until it matches the entries in the database. Because this all happens offline, there's no mechanism in place to delay the attempts or lock the user out.

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

Suggest a related project