Collaborate Disseminate
At my job, we have a UniFi controller that is hosted on a ESXi client – we need to get in there so we can switch the AP’s to our controller and other things. The company we took it over – didn’t give us the passwords for it. I’ve been just… Continue reading Gain access to UniFi controller hosted on ESXi box
I am trying to pentest my router’s login page, but I get a "connection refused" error.
I get the same error when I try to pentest my kali login and my Windows login to my PC accounts and I’m not sure how to fix it.
sudo hydra -l … Continue reading I am trying to Pentest with hydra password cracking tools [closed]
sudo hydra -L /root/USERID.txt -p ‘admin’ 172.67.190.32 http-post-form ‘/https://serumcoin.net/signin:customerId=^USER^&password=^PASS^:Please check your customer Id and password combination’
Hydra v9.4 (c) 2022 by van Hauser/THC &… Continue reading Every time this error coming why [closed]
I tried everything, I followed a tutorial https://www.youtube.com/watch?v=lGeSQ7STHaE&ab_channel=CartesianCaramel I did the exact same thing.
Why does hydra return wrong and random passwords for this command?
sudo hydra 172.17.0.2 http… Continue reading Hydra returning random and wrong password [duplicate]
I am using hydra to bruteforce my router admin page. By scanning with nmap it is showing port 22 ssh is open and when i use medusa it is bruteforcing properly but with hydra i am using this command :
hydra -l admin -p admin ssh://192.168…. Continue reading Why hydra showing this error [ERROR] could not connect to ssh://192.168.0.1:22?
On a machine supporting ssh, an RSA key is given but no username.
My idea was brute-forcing the SSH username with Hydra but I didn’t find any option to give the RSA key to Hydra.
Is it possible to brute force ssh usernames with an RSA key … Continue reading Hydra brute force ssh usernames with given RSA key
I’m learning about password attacks, and doing TryHackMe labs.
User: penny
Pass: leo1234
When using Hydra to find the password for the SMB user, I get no valid results:
I know the valid password is present in the wordlist, and the dicti… Continue reading Why does Hydra SMB attack not work while Metasploit does?
I’ve tried watching a tutorial with no luck. When I run Hydra it tells me:
[ERROR] the variables argument needs at least the strings ^USER^, ^PASS^, ^USER64^ or ^PASS64^: (null)
I believe it is because I need to tell it what fields to put… Continue reading How do you use the Hydra GUI? [closed]
https-post-form method runs lists but returns the list file path instead of the results
To Reproduce
install hydra 9.4
hydra localhost http-form-post "/login.php:username=^USER^&password=^PASS^&user_token=${CSRF}&Login=Log… Continue reading Hydra https-post-form returns the list file path instead of the results [closed]
I have a django project running at 192.168.0.103:8080 and when i am trying to scan the admin page at 192.168.0.103:8080/admin with this command:
sudo hydra -l admin -P passwords.txt http-get://192.168.0.103:8080/admin/
its saying all the… Continue reading Why hydra returning wrong passwords as valid on django admin page [duplicate]