1
Hacking and Security / Re: Brute/dictionary password breaking
« on: January 31, 2015, 09:47:38 PM »Hello,]I have an account but i don't know my password.It is a login form in microsoft sharepoint website.I am trying to use hydra tool but it doesnt work correctly. I have problems with defining the hydra attack command and the succes or fail parameters.I have been trying to do this for a week, but sleepless nights do not help me at all. The code looks like this below:hydra -l userlogin -P passwords.txt 123.123.123.123 http-form-post "/index.php:userinput=^USER^&passwordinput=^PASS^:password is wrong"It gives me a message that all the passwords are correct... Any ideas?
I'm not sure if you done these steps yet. But you should use HTTPFox to test valid and invalid logins. Look at the "headers" and "cookies". Look for "failure" and "success" keywords. Check to see if your site is HTTP GET or HTTP POST. Please read what syntax990 posted.