1

In Hydra-GTK, I've specified my target name as https://example.com (it's not www) and mentioned protocol as https-post-form and then entered username and password list and then I started. But I got this error message:

Hydra (http://www.thc.org/thc-hydra) starting at 2018-01-05 01:06:43
[ERROR] Invalid target definition!
[ERROR] Either you use "www.example.com module [optional-module-parameters]" *or* you use the "module://www.example.com/optional-module-parameters" syntax!
Improve this question

1 Answer 1

Reset to default
2

You should NOT put the https:// part in your site parameter, see the following example:

hydra example.com http-form-post "/password.php:user=^USER^&pass=^PASS^:Bad login" -L users.txt -P pass.txt -t 10 -w 30 -o hydra-http-post-attack.txt
Improve this answer
12
  • as per your suggestion, I made changes but now I'm getting following error:[ERROR] the variables argument needs at least the strings ^USER^ or ^PASS^: (null)..I hv alreday given reference to username and password as list named(username.txt, password.txt)..Please suggest what to do to get correct results. Note: I've tried with single username and password, still it doesn't work. Thanks!!!
    – Samy
    Jan 5, 2018 at 5:44
  • Please, share the exact command that you are executing in order to see the mistake on it.
    – galoget
    Jan 5, 2018 at 5:48
  • I've not written this command, but it auto generate when I filled entries in hydra gtk..so, please find autogenerated query below: hydra -v -V -L /root/Desktop/username.txt -P /root/Desktop/password.txt -t 16 -m /foo/bar/protected.html mysite.com https-post-form
    – Samy
    Jan 5, 2018 at 5:58
  • I recommend you to use the command line, it's easier in that way, if you're getting that error, is because of the -m /foo/bar/protected.html parameter, you have to use something similar to my example, put in that field the URL of the target, the parameters USER and PASS and finally the success or fail case, good luck!
    – galoget
    Jan 5, 2018 at 13:01
  • Thanks for the response. I've tried the same which you suggested and it worked. But it is giving me false results. In the uname and pwd list, there is 1 combination which is working . so, at the end, it displays 1 of 1 target successfully completed, 61 valid passwords found Hydra (thc.org/thc-hydra) finished at 2018-01-08 00:27:06 It showing right that 1 of 1 target successful but not showing which one is the correct combination(username:password)..And I'm not able to understand why it is saying that 61 valid password found
    – Samy
    Jan 8, 2018 at 0:29

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .