Brute Force Case Sensitivity - 08/24/03 03:45 AM
I have a quick question about case sensitivity. I want to attempt to use a wordlist to find a password for a known user on a Windows NT server with FTP access (Microsoft FTP Service Version 5.0). The program I use is Brutus. To test it out, I set up my home computer as a FTP server with Bulletproof FTP. I set up a user account and a password. Then I added the password to my wordlist in all lowercase letters. When I ran Brutus it displayed that no matches were found. I then changed the first letter to a capital and Brutus found the password. This led me to believe that it needed to be the correct case; but then I used CuteFTP to connect to my home server and tried the password in all lowercase letters and it gave me access. I was wondering if this was just an issue with my program, Brutus or what? I only ask because I would rather not have to double the length of my wordlist by altering the first letter of every entry. I would appreciate any feedback you have to offer.