Writing a brute force program using SendKeys.Send

[Senthilkumar]

Hi,

I have been using my vb.net for 2 years now, basically for database
application.

I have a client who lost is password for the mimer database and nobody
knows. So assuming if the password is less than 6 chars, i would like to
brute force it. Since this is a new approach for me, i would like to know
how to write a program.

What i found is
I start the program,
send keys to the program,
wait for the result. and then send the keys again.
I just have the program which can send keys from a to z.

But how do i increment the keys from a,b,c,...z,aa,ab,ac,,,az,ba,bb...till
zzzzzz.

Any idea and some sample in vb.net would be very much helpful.

Thanks in advance.

senthilkumar

[rowe_newsgroups]

You could increment the ASCII codes and convert them back to "normal"
text with the chr() function. For example:

dim i as integer
dim password as string

for i = 97 to 122
password = chr(i)
next i

This would set the password string = a, then b, then c, then d, ...
through z. Just play with the loop some to get what you require. By the
way asc() is the opposite of chr() - it converts text into its
character code

Thanks,

Seth Rowe

Senthilkumar wrote:

Hi,

I have been using my vb.net for 2 years now, basically for database
application.

I have a client who lost is password for the mimer database and nobody
knows. So assuming if the password is less than 6 chars, i would like to
brute force it. Since this is a new approach for me, i would like to know
how to write a program.

What i found is
I start the program,
send keys to the program,
wait for the result. and then send the keys again.
I just have the program which can send keys from a to z.

But how do i increment the keys from a,b,c,...z,aa,ab,ac,,,az,ba,bb...till
zzzzzz.

Any idea and some sample in vb.net would be very much helpful.

Thanks in advance.

senthilkumar

[Spam Catcher]

"Senthilkumar" <ke****@yahoo.co.inwrote in
news:#z**************@TK2MSFTNGP05.phx.gbl:

I have a client who lost is password for the mimer database and nobody
knows. So assuming if the password is less than 6 chars, i would like
to brute force it. Since this is a new approach for me, i would like
to know how to write a program.

What DB/app? There are several brute force cracking programs online :-)

[Senthilkumar]

Hi,

Its a Mimer 9.2 database. I searched the internet for any such utility, but
couldnt find one. Even Mimer itself says it cant find the password. If you
know anything on these lines, pls let me know.

Senthilkumar
"Spam Catcher" <sp**********@rogers.comwrote in message
news:Xn**********************************@127.0.0. 1...

"Senthilkumar" <ke****@yahoo.co.inwrote in
news:#z**************@TK2MSFTNGP05.phx.gbl:

>I have a client who lost is password for the mimer database and nobody
knows. So assuming if the password is less than 6 chars, i would like
to brute force it. Since this is a new approach for me, i would like
to know how to write a program.

What DB/app? There are several brute force cracking programs online :-)

[Spam Catcher]

"Senthilkumar" <ke****@yahoo.co.inwrote in
news:#I**************@TK2MSFTNGP05.phx.gbl:

Its a Mimer 9.2 database. I searched the internet for any such
utility, but couldnt find one. Even Mimer itself says it cant find the
password. If you know anything on these lines, pls let me know.

Is this database still available on the network? Or via ADO.NET/ODBC?

If it is - a faster (and more reliable) way of cracking might be to attempt
to connect to the server... then submit a username/password combo by
attempting to open a new connection.

[rowe_newsgroups]

By the way the ODBC connection string is
"Driver={MIMER};Database=mydb;Uid=myuser;Pwd=mypw; "

(from http://www.connectionstrings.com/)

Thanks,

Seth Rowe

Spam Catcher wrote:

"Senthilkumar" <ke****@yahoo.co.inwrote in
news:#I**************@TK2MSFTNGP05.phx.gbl:

Its a Mimer 9.2 database. I searched the internet for any such
utility, but couldnt find one. Even Mimer itself says it cant find the
password. If you know anything on these lines, pls let me know.

Is this database still available on the network? Or via ADO.NET/ODBC?

If it is - a faster (and more reliable) way of cracking might be to attempt
to connect to the server... then submit a username/password combo by
attempting to open a new connection.