Hi,
I have been practising my router hacking with medusa and hydra. To start i just wanted to check both tools worked so i tried with medusa with the following command.
Code:
root@bt:~# medusa -h 192.168.0.1 -u admin -p tomtom -M http
Medusa v2.1 [http://www.foofus.net] (C) JoMo-Kun / Foofus Networks <jmk@foofus.net>
ACCOUNT CHECK: [http] Host: 192.168.0.1 (1 of 1, 0 complete) User: admin (1 of 1, 0 complete) Password: password123(1 of 1 complete)
ACCOUNT FOUND: [http] Host: 192.168.0.1 User: admin Password: password123[SUCCESS]
As you can see no problems there...
So i moved onto hydra next, but hydra was not as simple as just putting HTTP in the command there was a list of diffrent types of http and i was not sure which one to use so i just tried them all because i was sure one had to work but no.
I was also sometimes asked for the webpage login address but my router does not have one of these. With my router you enter in the IP of the router into a browser and a windows box pops up asking of username and password. I am not sure which one is my problem.
Please look at my code below and tell me were i am going wrong? iv tried googling it for abar 2 hours now with no luck
Code:
root@bt:~# hydra -l admin -p password123 -t 1 -w 5 192.168.0.1 http-get http://192.0168.0.1
Hydra v7.2 (c)2012 by van Hauser/THC & David Maciejak - for legal purposes only
Hydra (http://www.thc.org/thc-hydra) starting at 2012-06-15 16:52:36
[DATA] 1 task, 1 server, 1 login try (l:1/p:1), ~1 try per task
[DATA] attacking service http-get on port 80
[STATUS] attack finished for 192.168.0.1 (waiting for children to finish)
1 of 1 target successfuly completed, 0 valid passwords found
Hydra (http://www.thc.org/thc-hydra) finished at 2012-06-15 16:52:51
Solved! after many hours of searching i realised it was the webpage that was causing the problem. I would have never of known you can put a simple "/" in the place of the webpage. Have to give the credit to the following youtube video:- http://www.youtube.com/watch?v=Em3u17ME4oU (wish it would have shown its face when i first tried
)
Correct code is below
Code:
root@bt:~# hydra -l admin -p password123 -t 1 -w 5 -V 192.168.0.1 http-get /
Hydra v7.2 (c)2012 by van Hauser/THC & David Maciejak - for legal purposes only
Hydra (http://www.thc.org/thc-hydra) starting at 2012-06-15 17:47:19
[DATA] 1 task, 1 server, 1 login try (l:1/p:1), ~1 try per task
[DATA] attacking service http-get on port 80
[ATTEMPT] target 192.168.0.1 - login "admin" - pass "password123" - 1 of 1 [child 0]
[80][www] host: 192.168.0.1 login: admin password: password123
[STATUS] attack finished for 192.168.0.1 (waiting for children to finish)
1 of 1 target successfuly completed, 1 valid password found
Hydra (http://www.thc.org/thc-hydra) finished at 2012-06-15 17:47:19
p.s sorry if i wasted your time people but now this thread is here it will stop others like me running into the same problem