User manual

85
6.2.1 Formatting imported Username/Password pairs
To import a file containing a list of Username/Password pairs, click on the Import button. When the
Import Dialog box appears, enter the name of the file containing the list of phone numbers, select the
“Usernames/Password” Import Options, and then click OK.
For PhoneSweep to be able to use imported username and password files, the following formatting must
be used: The username and password are each delineated by double quote characters. Any unquoted text
on a line is ignored. Each username/password pair is on a single text line ending in a Carriage
Return/Line Feed sequence ("MS-DOS Text with line breaks" in Microsoft's terms). For example:
"root" "toor"
"system" "manager"
"guest" "guest"
If you are making bruteforce username/password guesses against Microsoft NT RAS servers where a
Domain must be specified, this must be entered as a prefix to the username, with a '/' as a separator, i.e.
"Payables/pay" "me".
(Note for users of earlier versions of PhoneSweep: PhoneSweep’s format for username/password entries
has changed for version 4.0. The format from earlier versions of PhoneSweep [using <Tab> as the
separator] will be supported for at least two more releases, but we recommend converting any existing
files as soon as possible.)
Save the file of username/password combinations you have created, and copy or rename it to
bruteforce.txt in the main PhoneSweep directory. By default, this is C:\Program
Files\Sandstorm\PhoneSweep. If you specified a different path during installation, use that instead.
For more information on using bruteforce.txt when PhoneSweep is in penetrate mode, see Section 4.6.6,
The bruteforce.txt file.