This high configurability already created a market where people sell configurations for specific targets for only couple of US dollars.īeing so popular amongst hackers and having a surprisingly high offering of “login” configurations for the most known brands just emphasize the current gap for businesses to have the right mitigations in place. Many “checkers” that are out there usually being developed to attack a certain website, while “Sentry MBA” is based on a configuration file that can be adopted to attack any website. Those attacks are executed using special tools tailored for this scenario, called by the hackers “Combo Checkers”, such as “Sentry MBA”.įigure 1: “Sentry MBA” Combo Checker ToolĪlthough the tool is not new, the popularity of “Sentry MBA” amongst hackers is growing due to its high flexibility.

The attack exploits the fact that people usually use the same user name and password on many different websites.

“dictionary”), attackers “reuse” credentials leaked from other websites. Instead of trying to guess a certain user password from a generated word list (a.k.a. “Credentials stuffing” attack technique became a very popular way nowadays to brute force user accounts over web applications’ login pages.

Recaptcha bypass sentry mba