zizi999Join Date: 2012-06-02
Post Count: 69 |
how secure is roblox? on that topic of hacking. dictionary attacks/brute forcing, ik you can do it on facebook, gmail, wifi pass, routers, etc. but does it work on roblox? how secure is roblox exactly? |
|
|
what do you mean does it work on roblox?
you can crack any pass with bruteforce if the pass is simple enough, the website doesn't really matter |
|
cntkillmeJoin Date: 2008-04-07
Post Count: 49450 |
There's capatcha IIRC so it'd probably be much harder. You'd probably be throttled if not blocked. Test it. |
|
zizi999Join Date: 2012-06-02
Post Count: 69 |
like i mean will it allow through the captcha?? cus if you know much about it, 3rd party programs like hydra or brusta will give u it, but can it leave out the captcha? sry if im confusing |
|
|
doesn't facebook/gmail/basically everything else have throttles/limits to how many times u can try to login to an acc? |
|
QormJoin Date: 2010-07-25
Post Count: 1650 |
use proxies and you wont get a captcha, my friend did this with sentrymba and thats what he did
|
|
zizi999Join Date: 2012-06-02
Post Count: 69 |
if ur in proxy how does that remove the captcha? |
|
cntkillmeJoin Date: 2008-04-07
Post Count: 49450 |
I'm sure you still will get captcha, I'd imagine they count how many login attempts there have been since a successful one as well. |
|
zizi999Join Date: 2012-06-02
Post Count: 69 |
ye it does, but expensive brute forcers try the pass without really refreshing the page. so it just sees if pass fits in, doesnt refresh page |
|
zizi999Join Date: 2012-06-02
Post Count: 69 |
what if you have a good brute forcer and every 5 attempts it creates a new server. and 5 more ones and deltetes the old one, that way captcha wont get to u |
|
QormJoin Date: 2010-07-25
Post Count: 1650 |
you know what a proxy does right
|
|
cntkillmeJoin Date: 2008-04-07
Post Count: 49450 |
zizi do you even know what you're talking about?
Reread my post lmao |
|
|
You guys talk about how they can just change IPs before the CAPTCHA pops up, but honestly it'd be much more secure if it just worked on a by-account basis.
Basically, if there are 3 unsuccessful login attempts to BADGRAPHIX, it'd show a CAPTCHA for every future login attempt no matter the IP (or a timeout maybe).
Restricting it to an IP seems like a bad way of creating a security wall since any hacker worth their salt won't stay on one. This defeats the CAPTCHA's purpose and only makes it harder for the regular users.
Pretty sure I was bruteforced recently btw. My account got compromised and I can't really see any other way he could've gotten in. ROBLOX needs to improve their security. |
|
|
actually refreshing a page could be a good idea for fighting against limits ,if you think about it,because you could alter the throttle , eventhough it would make it really slower because of the internet connection of the owner, it could wait until the page is loaded using an app in vbs. (but it would make the bruteforce really slow, but you could use a dictionnary attack instead, which would reduce your time of wait for each process) |
|
|
I works just use alot of proxys there was a post on v3rmill about this, |
|
jody7777Join Date: 2009-02-22
Post Count: 1343 |
captchaed
and im pretty sure if you mass login into one account, automatic captchas wil be deployed + other defensives
FOR THE CAUSE |
|
zizi999Join Date: 2012-06-02
Post Count: 69 |
if he really did bruteforce into ur acc, u got weak pass, or he uses a expensive brute forcer. one that probly is faster and can SOME HOW skip the captcha, thats how i see it. i always thought roblox security was advanced, i did get brute forced once. im pretty sure it is possible, so im asking ur opinions. |
|
zizi999Join Date: 2012-06-02
Post Count: 69 |
i also know you can bruteforce or dictionary attack into routers and other logins that are weak and mby dont even have captchas, those are easy to hack into. but from all ive researched, all ive read, theres practically no way to brute force into a advanced system like roblox etc., atleast from my knowledge. (im very new to this concept) like many ppl said here, you can use several proxies |
|
QormJoin Date: 2010-07-25
Post Count: 1650 |
cringe
|
|
jody7777Join Date: 2009-02-22
Post Count: 1343 |
"skip captcha"
.... I HEREBY SHALL BE RESTRAINED BY NOW CAPTCHAS!!!!
/s
FOR THE CAUSE |
|
|
Awhile ago roblox had it that you can do 3 wrong then log into a real account would set the count back to 0 which would let bruteforce be possible but roblox patched that. I don't know how capachas work but I believe its another parameter passed through the login api which would be impossible to bypass.
|
|
BelleqJoin Date: 2014-06-05
Post Count: 21703 |
Erm... |
|