anode Posted July 25, 2016 Share Posted July 25, 2016 I'm having some issues with hydra with a http_form_post Using a: "/Default.asp?bhcp=1:textfield=^USER^&textfield2=^PASS^:F=Invalid" returns a valid password for every try Changing the F: to a S: then fails on every try (when there is one correct PW 1/2 way through the file) My main question is the F: or S: value can it be any text on the returned page or am I looking for something else? I've poked around a bit with Burpsuite, but no luck TIA Quote Link to comment Share on other sites More sharing options...
Francisco Amato Posted August 25, 2016 Share Posted August 25, 2016 Hi there, do you have more info about the output? F options include any response. Are you using latest version of hydra? https://github.com/vanhauser-thc/thc-hydra Maybe you can try with medusa http://foofus.net/goons/jmk/medusa/medusa.html You have some youtube reference on burp as well: Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.