Cracking Sites with C-Force

Section 1:Getting Started

A)Members Url:
B)Proxylist
C)Wordlist

Section 2: Settings
A)What to check
B)What to NEVER check

Section 3: Checking Hits

A)Correct way to Check Hits
B)WRONG way to check hits
_________________________________________________________________

Section 1:Getting Started

So you want to crack some form sites. Let's get a few things straight first. You will need the following: C-Force,proxylist,and wordlist. You can get C-Force at

http://www.megaupload.com/?d=O6S7TIIY
Pass : dadesiforum

Good wordlist and proxylist. Once you have the needed tools to begin with please open C-Force and click the Auto tab located between the Student and Pro tab.

Note: C-Force will NOT crack OCR forms!!! OCR forms are form sites that have a code verifcation in a box.

1.A) Members Url:

You will need to get the correct members url. You can get this by click on the members access section. The form site I am cracking today is http://brownhairgirls.com. The correct members login for this page is
http://brownhairgirls.com/login/login.cgi

You will need to place the Member's url in the Url box in C-Force located under the Tab "Auto."





1.Proxylist:

You will need a good list of anon proxies. Please check your proxies in Charon. A list of atleast 300 anon proxies should sufficent. Once you have a checked list of anon proxies you will need to load them into C-Force. Please click the Load Tab beside where Proxy-List: is. Find your proxylist on your computer. Now click your proxylist, it should become highlighted in blue. Then, click open. Your proxylist should load into C-Force. C-Force will let you know if the proxylist has been loaded.







1.C) Wordlist:

You will need a good wordlist in order to crack form sites.I can give you some or you can make your own. Now that you have a wordlist please click Load which is located beside Combo-List: Find your combo list on your computer, click it and it should be highlighted blue, then you should click open. This will load your wordlist into C-Force. C-Force will let you know that your combos have been loaded.







Section 2: Settings

Please click on the Settings tab located between Pro and Debug tabs to begin checking your settings.

2.A)What to Check

First thing you want to do is make sure you have the correct settings checked. If you do not check the right setting C-Force will not work properly.

Things to Check:
1)Autoload default proxylist (this will make things easier will open the directory of your current proxylist when you click load proxylist.

2)Skip proxy anonomy test: (this will skip checking to see if your proxys are anon. Use this option if you have already checked your proxies in Charon.)

3)Auto-Find Analyse Proxy : (this will automanicly load a proxy to analyse your site with.)

4)Check for blocking pages using proxy: (this will check for any pages that are blocking pages.)

5)Spoof Check: (this will check to see if there are any spoofs for the url)



2.What NOT to check

Please NEVER check the following.

1) Use proxy for analyses: (this will really **** up your test on a site because it will not analyze the site correctly)

2) Bruteforce without proxies: (NEVER NEVER EVER CLICK THIS)

Unless you want sit in a jail cell sharing a bunk with your friend Bubba.

Section 3: Checking Hits

3.A) Correct way to check hits

The Correct way to check form site hits is to go to the login page and enter them manually.

3. WRONG way to check hit

This would be clicking the link. You should never click the link in the format of http://user:pass@site.com/memberspage/

This option is NOT for form sites. Its for regular site with Basic Authenication (pop-up login.)



Cracking Literature and Images are Property of SexualXac.

Happy form cracking to you all!!!!!!!

Will post some good wordlist and proxy tools later !!

good going ila, yar can u give me some sites for proxies nd word list

can u give me some sites for proxies and word list.....pls

Charon!! (Proxy Judger)

http://www.megaupload.com/?d=Q8SE0Q0C

Some Wordlists!!

http://www.megaupload.com/?d=RJCTWUI1

Athena!! For Leeching Wordlists!!

http://www.megaupload.com/?d=7KRKDC01

Raptor!! For Creating Wordlists!!

http://www.megaupload.com/?d=82S090HT

Now how to create wordlists like which billing uses what login method here is list must have for all crackers!!

Billing companies:

CCBill........................................6-8 Character Alpha-numeric

Paycom.....................................minimum of 3 characters

Charge Solutions........................Mailed Pass/ when picked has no restrictions

Compugramming........................No restrictions

EENT.........................................4-8 character username:pass

GloBill.......................................3-15 Digits only username; no restrictions on pass

JetBill........................................2-32 Character username:6-32 character Pass

Kodiak......................................No restrictions

Lancelot....................................6 or more characters user:pass can not be the same

MSBill.......................................Minimum of 4 characters

NetBilling..................................No restrictions

PayPal......................................username is email address, pass is minimum of 8 characters

RJBTelcom................................6-8 character user:pass

SunBill......................................Mailed Pass

Verisign.....................................Minimum of 3 characters

Verotel......................................8 digit Username 7 digit Pass

Website Billing...........................No restrictions

WebQuest.................................2-8 character username, 6-8 character pass

WNU.........................................Minimum of 3 characters

Advance Proxy Leechers!!

http://www.megaupload.com/?d=E78Z9XPV

Now if you dont want to use wordlist programs or proxy leeching programs i can provide you with some good wordlists as i have given you some !! for Proxies i can post daily proxies here for your need !!

You can get proxies from these sites !!

www.publicproxyserver.com
www.proxy4free.com
www.digitalcybersoft.com
www.NNtime.com

Just dont forget to judge the proxies by Charon before attacking any site !!

Dec 29 anon proxies!!

http://rapidshare.de/files/10026355/DeC_29.txt.html

Dear ila420,
Thanks for the contribution and wonderful easy to use tutorial.
I few question regarding Basics of tutorial.
Where we can find Members URL.
Like you i had typed following URL in C-force URL i.e
http://www.candiddingdongs.com/login/login.cqi.
Is that correct or where i can find member urls.Waiting for your quick response.

its simple ... on every pron site u click members to enter the username and password .... right click on it and copy shortcut ... for Form sites right click to view source and get the members url !!

the correct members url for the site u mentioned is

http://www.candiddingdongs.com/Members/index.html

New Link For C-force Soft!!

http://www.megaupload.com/?d=GS5Z4642

Dear ila420,
Thanks for your reply.
Your answer had solved my problem.Now i can check the site member URl and paste it on notepad.Thank you very much.
But now i am facing another problem:
Now i am very much confused that which profy file or wordlist should i load to crack this website i.e. www.farangdingdongs.com.
According to ur given proxies and wordlist, I m trying it all but didn`t get success.The C-force application takes about 30mins to complete the operation.Now i am stucked!!!!
Can u help me for that also

Will you suggest me which prxies and wordlist should i load for successful Crack.Waiting for your reply.

ASWSOME ILA BHAI!!! GREAT!!

you can create your own wordlists by using Raptor ... u can leech wordlists from other forums by using the same soft ... search on google form proxies test them by Charon and den put em in C-force !! obviously it will take time !!