Luigi Auriemma

i have been trying to download it, i made sure i selected 0.2.6 but when i start it, it keeps saying it is version 0.2.1, i dunno what to do?? maybe its me but can please someone help maybe fix the link or send it to me via some sort of chat?

you have another copy of ventrilofp.exe somewhere in the system which so is executed before the one you have downloaded.
So the best solution is just doing a search in your c:\windows for the file ventrilofp.exe and delete the old copy

thanks for your help, now i can use it just fine hehe, i am just wondering one thing.. is it normal for most of the commands to not work? it always says that the command isnt supported by 3.x or something like that? please reply quick man thanks again for making it work though :D

yes it's normal since unfortunately I have not yet added support to the (I don't know how to call it) "in-game" part of the Ventrilo 3.x protocol.
It's probably nothing complex so maybe one of these days I will do this last step

thank you so much for whenever you complete it :D it will be very great hehe it will be very very cool too :D

yea dont worry it will come when the times right :D im excited for it as well although i dont get how he will make it so we dont get banned if he includes the rcon brute forcer as well but shit happens just gotta wait to see :D.

ventrilofp 0.2.7 released

i was excited until i saw that the flood options and brute forcer dont work for 3.x :(

the brute force can't work due to the limitation introduced in 3.x
the flood one works with some commands (for example the message flooder) but with the others the server seems to disconnect you.

anyway the purpose of the tool is demonstrating the fake players bug which is done perfectly, all the rest is only useless stuff not related to the specific research for which has been written the tool

ok cool im gonna have to try the comment spam see if that works :P

and well thanks luigi its awesome how u made it for both versions :D.

the server password brute forcer that will still work for 3.x tho correct?

sure, the join/server password works with 3.x too.
I have seen only a small problem locally caused by sockets consumption but locally (127.0.0.1) this is enough normal

version 0.2.7a released, contains some fixes for the in-game packets and I have re-enabled the admin brute forcing although it's totally useless due to the autobanning after 5 tries

yea true cool cool luigi lol how do i brute force the server entry password? -j when i do that it just goes through the guessing PW. it doesnt let me use my own pw list :(? give me an example on what the command will be if u dont mind thx.

I got same problem... heres picture

I need to adjust a bit the -j option since for the moment works only for the brute forcing (no wordlist/recover), I will fix it later

I have just released version 0.2.8 which contains many compatibility fixes and improvements.
For example now the -f option works completely with 3.x servers and I with the older servers (<= 2.2) versions too.

about the -j option, now it works very easily since is needed to use the classical brute forcing options (-b/-B/-w/-W) as usual and then -j which says to the tool to test the join/server password instead of the admin one

:( luigi when i try brute forcing the server PW it times out :( can i fix that?

Error: Connection timed out

I think that error means that the server was no longer online, since the tool has a timeout value of 5 seconds and if it's reached the tool redo the joining of the server.

How much times you see that error and after how many tries?
Are you sure you have not been banned?
does the server work using the official ventrilo client?
do you use a direct connection or you pass through a proxy (via sockscap)?

Unfortunately the brute forcing of the join password is not a very good idea since is required to rejoin the server everytime loosing tons of time and resources.
I have implemented it only because it required no big effort and because some people requested it.

also i was fuckin with my friends vent and did the comment spam -f 7 -1 and well after i quick cmd the bot didnt leave why is that becuz i tried it on someone elses server afterwards and it did the same then i got banned :( lol but anyways just asking.

and the erorr comes up when im like through my pw list maybe half way and well i know im not banned atleast i dont think but anyways if i did get banned then it must be an auto ban as well. but the server is 3.1 or w/e version and well no i wasnt using a proxy i dont care i sometimes do all depending who the ppl are lol. but anyways ttyl.

It seems like everytime 10 mins or so the bruteforce will time out when trying to guess the join password. I'm not banned and the server works fine with the original vent client. This is through a direct connection also by the way.

Any chance of geting a option to increase the timeout time added?

I'm going to add an auto-wait-and-reconnect instruction, so when connect() fails (I think this is the cause of the problem) will be recalled.
In the meantime can you post the exact error message you receive from the tool and one or two lines before it?

ok, I have released a new version with this micro fix.
Now when connect() times out it will retry for other 3 times with a delay of one second.

Seems to be working well so far