Cheat Engine

rapion124 · Posted: Fri Dec 12, 2008 2:22 pm Post subject:

You cannot brute force a password for a website in a timely fashion. Even if the password is plain-text, it will take maybe 200ms for you to send the password data to the server, and maybe another 200ms for the response.

That is literally thousands of times slower than brute forcing a local password. Even a P4 can count from 0 to 10^8 and do a "cmp" for each number in less than a minute.

Jorg hi · Posted: Fri Dec 12, 2008 5:34 pm Post subject:

killer1478 · Posted: Sat Dec 13, 2008 7:37 pm Post subject:

D: i used 123456789 and it took 4 ever O:

Jonyleeson · Posted: Sun Dec 14, 2008 5:30 pm Post subject:

nog_lorp · Posted: Tue Dec 16, 2008 3:13 pm Post subject:

Jvlaple · Posted: Wed Dec 24, 2008 10:39 pm Post subject:

Lol its made in GameMaker xD

kitterz · Posted: Wed Dec 24, 2008 10:54 pm Post subject:

So...does this work or not? =/

Jvlaple · Posted: Thu Dec 25, 2008 7:42 am Post subject:

Jorg hi · Posted: Thu Dec 25, 2008 1:54 pm Post subject:

nog_lorp · Posted: Thu Dec 25, 2008 2:51 pm Post subject:

Sigh...

Jorg hi · Posted: Thu Dec 25, 2008 5:56 pm Post subject:

92Garfield · Posted: Thu Jan 01, 2009 9:36 am Post subject:

Does this only count up? Confused

Jorg hi · Posted: Thu Jun 10, 2010 8:05 pm Post subject:

Slugsnack · Posted: Thu Jun 10, 2010 9:47 pm Post subject:

Nobody seems to have noticed the fallacy rapion124 has made there. He assumes that a bruteforcer has to run in a single thread and has to wait for a reply to each request before making the next one. The fact of the matter is you could have hundreds of threads. And have them all synchronise in such a way that they all try different passwords. All the threads run concurrently so waiting for a reply is not an issue.

As for counting and comparing in less than a minute. loooollll

hcavolsdsadgadsg · Posted: Thu Jun 10, 2010 10:40 pm Post subject:

brute forcing becomes an effort in futility very quickly as the password strength ramps up.

a strong enough password will easily outlast your lifetime regardless of what kind of horsepower you throw at it.

something like a 512 bit password probably results in a number of possibilities bigger than the number of known stars in the observable universe or some shit. it's effectively uncrackable, you'll never survive to see the outcome.

²Ü¨?ìµ©ÈI[No¾°0ÎF7zÖØÓ<?qâ7Ô}ªÃ¬"e?ÝÃµÙpböðnéW¦Ñ=?R¤÷}=:îý?©Õ

this alone would probably never be figured out.

at that level of complexity, number of potential combinations is ridiculous.
if my math is right:

2,772,669,690,
000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,
000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000

so assuming you're managing 100 trillion attempts a day, in one hundred years, you would have managed to plow out

100 trillion a day:
3,650,000,000,000,000,000 of those possibilities.

100 trillion a second:
315,360,000,000,000,000,000,000

needless to say, LAFF.