hydra vs router help

[fungus99]

so, my router address is

192.168.1.1

when i log into my router, i get transported to

192.168.1.1/index.htm

so therefore my hydra input should be

hydra -l admin -P pathto/dictionary.txt 192.168.1.1 http-get /index.htm

correct?

this is my output

Hydra v5.4 (c) 2006 by van Hauser / THC - use allowed only for legal purposes.
Hydra  starting at 2009-09-10 23:22:57
[DATA] 16 tasks, 1 servers, 77282 login tries (l:1/p:77282), ~4830 tries per task
[DATA] attacking service http-get on port 80
[80][www] host: 192.168.1.1   login: admin   password: aalii
[STATUS] attack finished for 192.168.1.1 (waiting for childs to finish)
[80][www] host: 192.168.1.1   login: admin   password: aals
[80][www] host: 192.168.1.1   login: admin   password: aaliis
select: Bad file descriptor
[80][www] host: 192.168.1.1   login: admin   password: aasvogel
[80][www] host: 192.168.1.1   login: admin   password: aas
[80][www] host: 192.168.1.1   login: admin   password: aarrghh
[80][www] host: 192.168.1.1   login: admin   password: aargh
[80][www] host: 192.168.1.1   login: admin   password: aarrgh
[80][www] host: 192.168.1.1   login: admin   password: aardwolf
[80][www] host: 192.168.1.1   login: admin   password: aardvark
select: Bad file descriptor
Hydra finished at 2009-09-10 23:22:59

it is worth mentioning that it is a d-link router with a log in screen NOT a pop up authentication window.

thanks guys.

[m-1-k-3]

hydra -l admin -P pathto/dictionary.txt 192.168.1.1 http-get /index.htm

correct?

It depends on the method which is used. Is it a basic authentication or a form-based auth? If it is form-based than you are using the wrong hydra parameter.

m-1-k-3

[TAPE]

Just checking..

Are you sure it is index.htm and not index.asp ?

Cant say for your router, but for mine it has been .asp, you should be able to see this in the browser address bar after typing in the IP for the router.


Also would add the -f option to stop when correct pass is found.


check