Results 1 to 3 of 3

Thread: hydra vs router help

  1. #1
    Just burned his ISO
    Join Date
    Sep 2009
    Posts
    1

    Default hydra vs router help

    so, my router address is
    Code:
    192.168.1.1
    when i log into my router, i get transported to
    Code:
    192.168.1.1/index.htm
    so therefore my hydra input should be

    Code:
    hydra -l admin -P pathto/dictionary.txt 192.168.1.1 http-get /index.htm
    correct?

    this is my output

    Code:
    Hydra v5.4 (c) 2006 by van Hauser / THC - use allowed only for legal purposes.
    Hydra  starting at 2009-09-10 23:22:57
    [DATA] 16 tasks, 1 servers, 77282 login tries (l:1/p:77282), ~4830 tries per task
    [DATA] attacking service http-get on port 80
    [80][www] host: 192.168.1.1   login: admin   password: aalii
    [STATUS] attack finished for 192.168.1.1 (waiting for childs to finish)
    [80][www] host: 192.168.1.1   login: admin   password: aals
    [80][www] host: 192.168.1.1   login: admin   password: aaliis
    select: Bad file descriptor
    [80][www] host: 192.168.1.1   login: admin   password: aasvogel
    [80][www] host: 192.168.1.1   login: admin   password: aas
    [80][www] host: 192.168.1.1   login: admin   password: aarrghh
    [80][www] host: 192.168.1.1   login: admin   password: aargh
    [80][www] host: 192.168.1.1   login: admin   password: aarrgh
    [80][www] host: 192.168.1.1   login: admin   password: aardwolf
    [80][www] host: 192.168.1.1   login: admin   password: aardvark
    select: Bad file descriptor
    Hydra finished at 2009-09-10 23:22:59

    it is worth mentioning that it is a d-link router with a log in screen NOT a pop up authentication window.

    thanks guys.

  2. #2
    Moderator
    Join Date
    Jan 2010
    Posts
    167

    Default

    Quote Originally Posted by fungus99 View Post

    Code:
    hydra -l admin -P pathto/dictionary.txt 192.168.1.1 http-get /index.htm
    correct?
    It depends on the method which is used. Is it a basic authentication or a form-based auth? If it is form-based than you are using the wrong hydra parameter.

    m-1-k-3

  3. #3
    Very good friend of the forum TAPE's Avatar
    Join Date
    Jan 2010
    Location
    Europe
    Posts
    599

    Default

    Just checking..

    Are you sure it is index.htm and not index.asp ?

    Cant say for your router, but for mine it has been .asp, you should be able to see this in the browser address bar after typing in the IP for the router.


    Also would add the -f option to stop when correct pass is found.


    check

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •