Entry 1.3 Manual
Program Requirements:
- IBM-PC or compatible;
- Windows 95;
- A direct Ethernet connection to the net, or a dialup SLIP or PPP account from an Internet
service provider;
- A TCP/IP stack;
- A wordlist (optional, but recommended).
Part 1: About Entry
The explosion of the World Wide Web in recent times has led to a large increase in the number of businesses offering proprietary content online. The security of these sites is often quite poor: passwords to privileged accounts can usually be found on a short list of words. Entry finds these passwords.
Part 2: Initiating an attack

Username, Password Source
There are three choices:
- Retrieve words from a user-supplied wordlist (Here is an example).
- The guesser will supply every possible permutation of characters for a given
length. For example, if you chose 4 letter lowercase-only words, it would generate
"aaaa", "aaab", "aaac", and so on, until "zzzz".
- A static username or password will not be changed between login attempts. You should
choose Static if you know the username but are unsure of the password, or vice versa.
Request Method
Entry can request a HTTP document in one of two ways: GET or HEAD. A GET request will
attempt to retrive the entire protected document, a HEAD request will only attempt to retrieve
information about the document. Generally, you will want to use GET.
This field is ignored for FTP sites.
Character Sets
If you choose to have usernames and/or passwords supplied by the guesser, you must check at least
one of these boxes. The guesser will use all characters in the selected set(s) to generate words.
- Lowercase:
- 'a' to 'z'
- Uppercase:
- 'A' to 'Z'
- Numbers:
- '0' to '9'
- Punctuation:
- ! " # $ % & ' ( ) * + , - . / : ; < = > ? @ [ \ ] ^ _ ` { | } ~
Document URL
Type the secure HTTP or FTP address in this box. Here are some examples of good URLs:
- http://members.myserver.com/secure/document.html
- http://cia.com:81/ghetto/crack/plans.doc
- http://topsecret.co.jp/
- ftp://ftp.myserver.com
- ftp://webhost.org/
All URLs must start with either http:// or ftp://, according to the protocol you
wish to use.
Part 3: Creating a good wordlist
In the majority of cases, a wordlist attack will be much faster than a
guesser attack. The construction of a good wordlist, therefore, is very
important.
A effective wordlist contains keywords which are relevant to the site and its users. For
example, if you are making an attack against the Chicago Sentinel Online,
you should add chicago, sentinel, online, press, news, extra, scoop, etc., to your
list. An good list should contain AT LEAST fifty words, and may contain hundreds or even
thousands.
Part 4: Saving your progress (Entry Pro users only)
If you are using the guesser or a large wordlist, a complete attack simulation may take hours. An Entry status file, just like any other program document, should be saved to
disk on a regular basis.
Entry can automatically save your progress after a user-specified number of attempts (set in
the Properties box), so that you may leave it running unattended. You may occasionally
wish to save your progress manually as well. There are two ways to save manually: Normal Save,
and Lazy Save.
If you have used Windows programs before, you are already familiar with Normal Save: Simply choose Save from the File menu (or press Ctrl-S). A Normal Save cannot be performed while you are online, as your progress is constantly being updated.
You can use a Lazy Save to record your progress without going offline. Unlike a Normal Save, a Lazy Save does not save immediately. Instead, it temporarily pauses your attack at the next convenient moment, going offline just long enough to save, and returns online. Click the button with the sleepy disk; when it pops back up, your progress has been saved. A Lazy Save cannot be performed while offline.
Until you have saved your file normally (and chosen a name for it), the Auto Save
and Lazy Save features will both use the name AutoSave.eaf.
Part 5: Finding a successful username/password combination
Entry will automatically go offline if:
- A working username/password combination is found;
- All combinations have been tried;
- There is a server or connection error.
An appropriate message will be displayed in each case. If you chose the
"Open browser on success" option in the Properties box, the cracked site or page
will be loaded in your browser immediately.
Part 6: Troubleshooting
- Entry says "The document is not secure." What's wrong?
- You must give Entry a secure URL. For the purposes of this program, A HTTP URL is not secure unless clicking it causes your browser to request a username and password (usually in a pop-up box).
- Entry says my URL is invalid. What's wrong?
- Entry uses the FTP and HTTP protocols; good URLs should start with either ftp:// or http://.
- Entry says my wordlists have been changed, and won't load my status file. Why?
- Inside every status file, a timestamp for each wordlist is recorded. When you open a status file, these stamps are compared with the wordlists themselves, and if they don't match,
your status file is invalidated. To avoid this error, refrain from modifying your wordlists until after an attack is completed.
- Why can't Entry verify the security of my document?
- Make sure:
- You entered a valid server name in the URL box;
- The server is running the protocol you specified;
- You are currently connected to the Internet.
- Entry says "Internet connection failed." Why?
- Make sure:
- You didn't try to FTP to a WWW server, or vice versa;
- You are still connected to the Internet.
Part 7: Tips for using Entry
- DO use the Auto Save feature to record your progress. (Entry Pro only)
- DO use wordlists with at least fifty words.
- DO NOT change the wordlist(s) in any way while an attack is in progress.
- DO NOT use Entry to gain illegal access to any computer or information contained therein.
Part 8: Program Specifications
Protocols: FTP, HTTP/1.0 Basic Authentication
Maximum Speed: Undefined (approximately 200 attempts per minute over a 28,800 modem connection)
Maximum Attempts: 2,147,483,646 per session (for Entry Pro; 2048 for Entry LE)
Maximum Word Length: 8 for guesses, 28 for list-supplied words