Linked Questions

2
votes
1answer
6k views

Hydra from Kali Linux + Tamper http post form syntax of the failure login attempt [duplicate]

I had asked this question in the general forum I think it is more adequate to place it here. https://stackoverflow.com/questions/27606232/hydra-from-kali-linux-tamper-http-post-form-syntax-of-the-...
0
votes
1answer
2k views

THC Hydra 16 Valid Passwords? [duplicate]

So when I do hydra -l Admin -P "rockyou.txt" -s 80 192.168.13.1 http-get / it doesn't work for me. It says all 16 passwords are valid, but none of them works. Can anyone help me with this? I tried ...
0
votes
0answers
155 views

All passwords are valid with hydra [duplicate]

I am actually testing a brute force attack with hydra on a kali linux machine (for educational purposes). I want to find the administrator password of a Joomla website. The Web server is on a dmz and ...
1
vote
0answers
90 views

THC-Hydra - one good pass = shows all valid [duplicate]

As in title. I'm testing my router security and I came up with problem. hydra 192.168.0.1 http-get-form "/:un=^USER^&pw=^PASS^:User Name or Password is incorrect." -L usernames -P passwords ...
3
votes
0answers
80 views

Why I have more than one valid passwords with Hydra? [duplicate]

I am trying to do a brute force with Hydra on a web page but it isn't DVWA so I don't have control over code. The failed result has 200 OK response and "Area protegida" message. I tried it with this ...
0
votes
0answers
52 views

hydra password penetration test syntax [duplicate]

I am trying to penetrate a password on my own website using hydra. Let's say that I know login and password and i just put both there like in sample below: hydra -l admin -p password 123.123.123.123 ...
0
votes
0answers
42 views

Bruteforce with Hydra [duplicate]

I'm trying to use a Hydra script in the following scenario on localhost and Linux: After web form login, my app redirects to another page with header(Location: internalpage.php) I use this syntax ...
0
votes
0answers
34 views

Crack google account password [duplicate]

I am trying to crack a google account that I own personally. I have forgotten the password I have a wordlist that might have the password for the account. When I try to crack it using hydra it returns ...
4
votes
1answer
5k views

how to get cookies from aspx site to use it with hydra

I've been playing around with Hydra and .aspx site and I've hit a bit of a snag - Hydra responds letting me know that the first 16 passwords in my password list are correct when none of them are. ...
1
vote
0answers
6k views

Linux Hydra issue - random correct password success

I have an issue with Hydra when I use it. I have tried the same command lines given in guides directly supported by the Damn Vulnerable Web Application (DVWA) v1.8. Ok so.. here is my attempt output....