Skip to main content
Information Security

Return to Question

Tweeted twitter.com/StackSecurity/status/1493012172749918209
edited body; edited title
Source Link
schroeder ♦
schroeder ♦
  • 132.2k
  • 55
  • 307
  • 348

Brute Force Post via HydaHydra

I am trying to brute force an HTTP login form via Hydra.

The problem I am having is in regards to the response code returned by the page. I am receiving false positives on every password.

Even failed logins return HTTP 200 responses, which iI believe is leading to false positives.

How can iI alter hydra to look for something like content length-length header or a unique string returned to avoid the false positives.?

Brute Force Post via Hyda

I am trying to brute force an HTTP login form via Hydra.

The problem I am having is in regards to the response code returned by the page. I am receiving false positives on every password.

Even failed logins return HTTP 200 responses, which i believe is leading to false positives.

How can i alter hydra to look for something like content length header or a unique string returned to avoid the false positives.

Brute Force Post via Hydra

I am trying to brute force an HTTP login form via Hydra.

The problem I am having is in regards to the response code returned by the page. I am receiving false positives on every password.

Even failed logins return HTTP 200 responses, which I believe is leading to false positives.

How can I alter hydra to look for something like content-length header or a unique string returned to avoid the false positives?

Source Link
Hysii
Hysii
  • 199
  • 1
  • 1
  • 5

Brute Force Post via Hyda

I am trying to brute force an HTTP login form via Hydra.

The problem I am having is in regards to the response code returned by the page. I am receiving false positives on every password.

Even failed logins return HTTP 200 responses, which i believe is leading to false positives.

How can i alter hydra to look for something like content length header or a unique string returned to avoid the false positives.