Luigi Auriemma

Hello, new to the forums. I took a look at your Ventfp tool and have to say its pretty cool. I had a question that i was unable to find the answer too at least with search.
Maybe i am doing something wrong (which is probably the case) but i was wondering if this program can crack a ventrilo servers join password. If it can how would i go about doing that?


I originally took a look at this program for this specific purpose, so if anyone knows a way to achieve a password break on a ventrilo join password please let me know.

I have replied to the other post

yes, i saw that : ( thanks for the quick reply.

Now that takes care of user password for entry, is it possible to get the admin password once connected to the server? i'm still confused about this subject, in another post it seems like someone got a hold of one but it was encrypted and thus pointless. (Due to Ventrilo's custom encryption?)

uhmm I try to explain it in easier words.
if the target software is not affected by specific vulnerabilities which can allow (as direct or indirect effect) the retrieving of sensible informations like an admin password the only alternative if "guessing the password".
password guessing simply means "brute forcing" and/or "wordlist checking" which stands for the continuous trying of different passwords (sequential chars in the first case and fixed words in the second one) one after the other.

in ventrilo 3.x there is a simple mechanism which automatically bans the client if it tries more than 5 admin passwords and, in any case, all these attemps are logged and easily recognizable by the admin.

the uncertain results, the abnormous volume of time needed, the risks showed above and other factors makes the "password guessing" (referred to network services) only a theorical security problem.

O ok, i see what you mean now.