
Additionally if you're a beginner with Backtrack then first few previous articles are highly recommended on LINUX
Alright, Lets get start..
First, lets take a quick overview about what we're going to do here. We'll apply different passwords on the target's Gmail id from a password list using Hydra which is available with Backtrack. That's why I still love it. :) It'll easily get back the password on successful login.
Requirements:
- A password.txt file with a list of expected passwords, Either write your own or get one from here
- Backtrack 5 (any version)
- Internet Connection
Turn on your Backtrack machine :P
Navigate to Applications > Backtrack > Privilege Escalation > Password Attacks > Online Attacks > hydra-gtk and launch the hydra tool
Now, under the Target tab set following parameters
Single target > smtp.gmail.com
port > 465
Protocol > smtp
and check > use SSL, show attempts and Be Verbose
Click on Password tab, set these parameters
Username > target email address
Password List > select the Password.txt file
check the option > try Login as password
Now move to start tab and click on start button at the bottom to begin the attack.
If everything goes well, then you'll get the password.