jeudi 1 janvier 2015

THC-Hydra dictionary attack on jsp login form



I am trying to use hydra to attack on a jsp form but i have some confusins. Normally we use command something like this



hydra -L list_user -P list_password HOST-ADDRESS http-post-form "/login.php:username=^USER^&password=^PASS^&Login=Login:Login failed" -V



where as in my case form settings are as follows



form name="frmLogin" onsubmit="return validateLoginForm()" action="http://ift.tt/1xyQqrB" autocomplete="off" method="post"



and then within the form tag



input type="hidden" name="target" value="http://ift.tt/1Hj7hzN"



I want to know what will be my HOST-ADDRESS and http-post-form address in this case. I shall be very thakful to you.


/Shan





Aucun commentaire:

Enregistrer un commentaire