Skip to content

Testing a list of username password pairs

Philip OKeefe edited this page Jul 27, 2016 · 3 revisions

Create a file containing a list of username-password pairs. By default shard expects these to be in the format "username":"password". An example file containing 3 credentials:

~ cat /tmp/credentials.txt
"[email protected]":"123456"
"[email protected]":"s3cr3tp@ssw0rd"
"system":"system"~

To test each username-password pair execute shard with the -f parameter:

~ java -jar shard-1.5.jar -f /tmp/credentials.txt
21:47:38.179 [+] Running in multi-user multi-password mode
21:47:38.210 [+] Parsed 3 credentials
21:47:38.211 [+] Running 12 modules
21:47:48.761 [+] [email protected]:123456 - No results
21:47:55.492 [+] [email protected]:s3cr3tp@ssw0rd - Reddit, Twitter
21:48:02.141 [+] system:system - No results
➜  ~

We can see in the output shard successfully parsed 3 sets of credentials and loaded all modules. Each following line lists the credential and a list of websites it is valid.