Skip to content
#

password-cracker

Here are 153 public repositories matching this topic...

jhertz
jhertz commented Apr 17, 2020

Hi All,

So I'm trying to use hydra to bruteforce a login on a system that uses custom http headers to receive the username and password. Hydra does not seem to be doing substitution of ^USER^ and ^PASS^ when used as HTTP headers. If I issue issuing a call to hydra like this:

hydra "http-post://0.0.0.0:8000/:H=username\:^USER^:H=password\:^PASS^" -l admin -p admin

I see the following r

Improve this page

Add a description, image, and links to the password-cracker topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the password-cracker topic, visit your repo's landing page and select "manage topics."

Learn more

You can’t perform that action at this time.