I'm trying to penetrate test a web based form (which is MikroTik's login form) with different tools for security measurement.
I've tried THC-Hydra but problem is the password computed as MD5 first and then it is send to the form, like this:
username=USERNAME&password=458871649ad64f39c81ba19be9829c58&dst=&popup=true
As you can see, username is sent as plain text but password (which was entered as PASSWORD
here as example) is computed as MD5 first and then sent to the server while Hydra puts password as plain text.
Any idea how to work it with Hydra (or any other tool)?