NiX Brute Forcer

NiX Brute Forcer tool is intended to demonstrate the importance of choosing strong passwords.

The goal of NiX is to support a variety of services that allow remote authentication such as: MySQL, SSH, FTP, IMAP. It is based on NiX Proxy Checker.

How to use? Type ./brute for options

For best reliability, update either to the latest PHP 5.2.x or 5.3.x. CLI

NIX_BruteForce.bz2 Directory structure:

NIX
|
|_32 32bit version of NiX
|_64 64bit version of NiX
|_loaders SourceGuardian 8.2 loaders (Both 32 and 64bit versions are included)

Requirements:

A) Linux box or a VPS
B) PHP CLI version between 5.2.x - 5.3.x
C) SourceGuardian 8.2 loader: Provided in "loaders" directory
D) If you are using PHP source compile (encouraged to use). The minimum ./configure options are:

--with-curl --enable-sockets --enable-pcntl --with-openssl

E) Required php.ini settings:

short_open_tag = On
allow_call_time_pass_reference = On
safe_mode = Off
register_globals = Off
register_argc_argv = On
enable_dl = On

SourceGuardian 8.2 loader (extension) must be in extension_dir defined in php.ini

For PHP 5.2.x : extension=ixed.5.2.lin
For PHP 5.3.x : extension=ixed.5.3.lin

If you are using 32bit operating system, you need to copy the loader from "32" directory
If you are using 64bit operating system, you need to copy the loader from "64" directory

What is new in this release:

• Basic Authorization & FORM support in both standard and HTTPS (SSL) mode
• HTTP/SOCKS 4 and 5 proxy support
• FORM auto-detection & Manual FORM input configuration.
• It is multi-threaded
• Wordlist shuffling via macros
• Auto-removal of dead or unreliable proxy and when site protection mechanism blocks the proxy
• Integrated proxy randomization to defeat certain protection mechanisms
• With Success and Failure Keys results are 99% accurate
• Advanced coding and timeout settings makes it outperform any other brute forcer

What is new in version 1.1.1:

• Fixed cookie handling in FORM mode when using a SOCKS proxy.
• The tool now proceeds accordingly if FORM does not redirect at all after
• a "HIT" or if in some cases redirect detection failed.
• Improved debug mode.

What is new in version 1.0.3:

• The "Client cannot resolve the hostname" SOCKS5 feature was reverted, because a majority of public SOCKS5 proxies are unreliable.
• Hostnames are now only resolved once.

What is new in version 1.0.2:

• If the site target was something other than a default address such as: a custom ip and port; create headers accordingly, this will fix any timeout issues that may occur
• FORM auto-detection has been fixed in SSL mode.
• FORM auto-detection has been improved. Note: Javascript based forms are not currently supported but these can be defined with a manual form input option.

Requirements:

• PHP
• SourceGuardian 8.2