Cracking Basics - MUST Learn Keywords / Terms ( only for educational purposes )
1. Combos List
A combo list in ethical hacking refers to a list of usernames and passwords that are used for brute force attacks or credential stuffing. These lists are often compiled from data breaches and are used hackers to steal user information.
2. Proxies
A proxy server acts as an intermediary between a user and the internet. Here are some key points about proxies:
- Anonymity: Proxies mask the user's IP address, helping to protect their identity and location.
- Access Control: They can restrict access to certain websites or services based on various criteria.
- Bandwidth Savings: Proxies can cache content, which reduces the amount of data that needs to be fetched from the internet, saving bandwidth.
- Security: By filtering traffic, proxies can protect against malware and other threats.
Proxies are used in various scenarios, such as browsing anonymously, bypassing geo-restrictions, and enhancing network security. Ethical hackers often use proxies to hide their identity during penetration testing.
3. Checkers / Account Checkers:
Account checkers are tools used in ethical hacking to verify the validity of a list of usernames and passwords. They are often used in conjunction with combo lists to perform credential stuffing attacks, where multiple login attempts are made using different combinations of usernames and passwords.
Here are some key points about account checkers:
- Verification: They check if the provided credentials are valid by attempting to log in to the target service.
- Automation: These tools automate the process of testing multiple credentials, saving time and effort.
- Proxy Support: Many account checkers support the use of proxies to hide the attacker's IP address and avoid detection.
- Reporting: They often provide detailed reports on which credentials were successful and which were not.