This question already has an answer here:
I had asked this question in the general forum I think it is more adequate to place it here.
Here it is the complete description:
I am doing a pentest of an internal site, I would like to check how secure is this when using Hydra from (Kali) Linux as the password cracking tool.
I have used the mozilla Tamper add on to get the head options ( I think I do not have the correct ones)
What I tried is: user=tech15 (technical user, users are known) List of passwords where only ONE is the correct one = fakelist.txt
hydra -l tech15 -P fakelist.txt -vV www.mysite.com http-post-form "/members-login.php=:user^USER^&pass=^PASS^:S="
The string "/auth/ajax-login-frame.php?ajax-login-frame-id=register-or-login-overlay-ajax-login-frame&usernameAttempt=tech15" is the failure page, when password is not correct and it tells you the user has tried to login.
When succesfully login, the page is redirecting to another page.
"/members-login.php" is the webpage
and the tamper just provided me with the following string, where the last part of the user attemt is not written
I wonder if the information from tamper I have collected is correct, or I need to look after again. Could you please help me to understand how to describe properly the syntax for the succesful login.
When executing the commands in hydra all passwords from the list (99 passwords) are valid, which is not correct and only ONE is the valid one.
[www-form] host: ip.number.X.XX login: tech15 password: notcorrect [STATUS] attack finished for www.mysite.com (waiting for children to complete tests) 1 of 1 target successfully completed, 99 valid passwords found
Could you please take a look and point me in the proper direction Is there any documentation for Hydra?
New EDIT ---- 22-12-2014 ----
It is still not solved, but I think I have not the correct information
These are the chains I have at the moment.
But I still get all 99 paswords as valid ones.