Our lab at the university was about password security, "hacking" of web pages (using hydra) So using the command below you manage to get the admin password.

hydra -l root -P /home/ubuntu/rockyou.txt -t 1 http-get /whmcs/admin/

My question is, what if i don't know this part /whmcs/admin/ is there a simliar command that can get the password without this part ?

  • So, do you know what /whmcs/admin/ is? It's a location in a filesystem. That should help you understand what the command is doing – Rory Alsop May 6 '17 at 11:05
1 is the IP address of the server you want to crack and http-get is the protocol which is used to send passwords, in this case plain HTTP authentication, and /whmcs/admin/ the directory on the server. Webservers can have multiple sites and configure different users and passwords for them. So the accounts which are valid on /whmcs/admin/ might be different than those on /phpmyadmin/ or /plesk/.

That's why you need to tell hydra which directory exactly you want to crack. There is usually no way to tell how many directories with individual http password protection are configured on a server and what other functionality there is on the server which could be called an username+password authentication (like login forms).

Usually you wouldn't run a tool like hydra blind. You would try different URL paths and different protocols on a webserver until you get prompted for a password, find out what technology is used to implement that password prompt, and then run hydra on it.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.