Bruteforce using Hydra

Sun, 20 Mar 2022 00:00:00 +0000

Bruteforce using Hydra Link to heading

To use Hydra we need to mainly identify 4 Parameters:

<IP Address> = ""

<Login Page> = ""

<Request Body> = ""

<Error Message> =""

To identify these parameters, lets intercept the request with Burp.

Based on the intercepted values, I have filled the values for HTTPS site subdomain

= “10.10.10.43”

= “/db/index.php”

= “^PASS^&login=Log+In&proc_login=true”

=“Incorrect password.”

Now Formulate the bruteforce command using hydra. For using hydra always username is required. In this case we can give any fixed value. Remember to use “https-post-form” as its a ssl website.

Hydra on rchitect

Bruteforce using Hydra

Bruteforce using Hydra Link to heading