Collaborate Disseminate
I’m currently trying to generate a very specific word list. The words generated should go like this:
crunch 9 9 -t @%%%%%%,,-o test.txt
But one of the constraints that I have given myself is that the numbers generated shouldn’t go above a… Continue reading How to limit number strings with crunch
I am trying to brute force the brute force log-in page on DVWA v1.0.7 (/dvwa/vulnerabilities/brute/)
I have been working on this for quite some time but I keep getting a bunch of false positives when I use a wordlist I created and when I u… Continue reading Brute forcing the brute force page on DVWA v1.0.7 using hydra
To preface this I have full permission to do anything I want to any service I can find on this network as it’s part of a course I’m doing in Ethical Hacking. I also want to mention that I’m quite the novice when it comes to information sec… Continue reading Hydra and Telnet bruteforcing
What are the patterns (best practices, whatever) to prevent brute force (and features alike) in stateless API architectures that keep the system stateless? Couldn’t find anything regarding this topic.
I want to keep the system stateless to… Continue reading Brute force prevention and alike with stateless API architecture
I am using hydra for the first time but am having trouble parsing the input. Specifically I am getting this strange error saying optional parameters must have the format X=value.
hydra -l haffariayoub1203 -P /usr/share/wordlists/rockyou.tx… Continue reading Hydra Error optional parameters must have the format X=value [closed]
I am trying to brute force a website for fun. But I am getting this strange error saying optional parameters must have the format X=value.
Any idea how to fix this?
hydra -l haffariayoub1203 -P /usr/share/wordlists/rockyou.txt.gz themedia… Continue reading Error optional parameters must have the format X=value [closed]
“When those invitations went out… somehow, your password hash went out with them.” Continue reading Slack admits to leaking hashed passwords for five years
I’m trying to brute force an Instagram account I created to play with Hydra. I ran the following command:
Even though the correct password is in the list, it didn’t work. This is the output I get:
Why does Hydra not return the correct pa… Continue reading Hydra brute force not working for web app, but the correct password is in the list
Is there any benefit of using a non-standard SSH port when PasswordAuthentication is turned off in sshd?
The only benefit of non-standard SSH ports I know of is a reduction of the amount of brute force attempts since most scanners only att… Continue reading Benefits of non-standard SSH port when password authentication is turned off
I’m using BurpSuite to bruteforce the login credentials for an ASUS router via the router interface page. I’ve found that the login credentials input are only base64 encoded and displayed in the request body. I’m using the Intruder to brut… Continue reading burpsuite see href script in response body