User manual

67
brutecreate.exe does not evenly distribute Username/Password combinations throughout the
bruteforce.txt file. You must do this after using brutecreate.exe to populate the bruteforce.txt file.).
Replacing the bruteforce.txt file while a sweep is in progress is not recommended. If you do so,
PhoneSweep may repeatedly dial a phone number and hang up immediately, without completing the scan.
Also, the percentage of brute force guessing that was completed will not be accurate in any report you
generate. Instead, stop your scan first, replace the bruteforce.txt file, import the file, and Rescan the
profile.
4.6.7 Using brutecreate.exe to customize bruteforce.txt
The brutecreate.exe utility customizes bruteforce.txt. To use brutecreate.exe open an MS-DOS prompt
and go to the PhoneSweep directory. There, type the command with the following options:
brutecreate [combine FILEA FILEB [Flip]] | restore | clear | help
• Combine takes usernames from FILEA and passwords from FILEB pairs each username with
each password, and appends the results to the existing bruteforce.txt.
o FileA is a .txt file containing a list of user names (no double quotes), with each user name on
its own line ending with a carriage return. You can create NULL user names by having an
empty line (carriage return only).
o FileB is a .txt file containing a list of passwords (no double quotes), with each user name on
its own line ending with a carriage return. You can create NULL passwords by having an
empty line (carriage return only).
• Flip is an optional subcommand for Combine that takes each username forward and reversed as
the password. For example, if FILEA contains the usernames root and guest, brutecreate.exe will
yield the additional lines for each in the form of:
“root” “root”
“root” “toor”
“guest” “guest”
“guest” “tseug”
You still must specify a FILEB for this command to work
• Restore returns bruteforce.txt to the default username/password combinations supplied with
PhoneSweep, using systemdefault.txt as source.
• Clear removes all text from bruteforce.txt. Use this command first when you want to overwrite
the existing bruteforce.txt file, rather than appending brutecreate.exe’s results to it (see Appendix
F for an example).
• Help lists brutecreate.exe options, without actually running the program.