mercredi 14 janvier 2015

Bruteforce with Hydra



I'm trying Hydra script in my own scenario on localhost and Linux: after web form login, my app redirects to another page with header(Location: internalpage.php)


I use this syntax but how can I edit in order to give the S= parameter for login successfully done? because every time hydra returns, additional the right password, also the wrong password. Thanks


hydra localhost http-form-post "/admin/login.php:username=^USER^&password=^PASS^&submit=Login:access not valid" -L users.txt -P pass.txt -t 7 -w 30 -vV -o output.txt


Thank you





Aucun commentaire:

Enregistrer un commentaire