What is Hydra?
Hydra is a quick system login password cracking tool.
Hydra can run through a list and "brute force" these authentications. Imagine manually testing a 1,000 common password list, it'd take alotta time. Hydra automates that for us.
What information do we need to collect for Hydra to work?
As a test, we start by turning on a proxy for Burp suite using FoxyProxy and adding Burp's Hostname and port.
We can see it turned on here
Then, turning on Intercept in the Proxy tab on the Burp suite
And after adding a random user & password, and submiting the form, we can tell that nothing happens on the login page. No failure, no success. And thats because our HTTP POST request got intercepted by Burp.
This is important to us since we need to understand what is the parameter names set by the site for the username and password, which we can see in the HTTP Request
The username's parameter is "username", and the password's is "password".
This is important for hydra to know, as it needs to know how to formulate its POST Requests. But there's one more thing it needs to know, that is it's sign of failure.
So we will forward our bogus login request
And turn intercept off so we can recieve the error from the login page.
"Your username or password is incorrect."
^
Hydra will look for this to verify each password it tests out.
Now we write our command
Opening up the terminal, here's the short command with all the info we gathered:
And shortly after running we get a match with the password of "sunshine"
Plugging it into the site, and we get our flag!
What about other authentication types?
Hydra isnt just for login pages. We used http-post-form in our previous command, but we can also use ssh for ssh brute forcing.
Using the username and password we captured, we can successfully ssh to that ip and successfully gain access.
And we found the flag!
This Was Hydra
lucirie (Ziad Alezzi) ยท GitHub
lucirie has 35 repositories available. Follow their code on GitHub.
github.com
Top comments (0)