Hacking Wormz-Security Behind you

Hack Like a Pro: How to Crack Online Web Form Passwords with THC-Hydra & Burp Suite

Welcome back, my hacker novitiates! HY I had introduced you to two essential tools for cracking online passwords—Tamper Data and THC-Hyd...

learn

Hack Like a Pro: How to Crack Online Web Form Passwords with THC-Hydra & Burp Suite

BDxoul 5:31 AM

BDxoul

Welcome back, my hacker novitiates! HY I had introduced you to two essential tools for cracking online passwords—Tamper Data and THC-Hydr...

learn

Hack Like a Pro: How to Crack Online Web Form Passwords with THC-Hydra & Burp Suite

BDxoul 5:31 AM

BDxoul

Welcome back, my hacker novitiates! HY I had introduced you to two essential tools for cracking online passwords—Tamper Data and THC-Hydr...

Subscribe to: Posts (Atom)

Hack Like a Pro: How to Crack Online Web Form Passwords with THC-Hydra & Burp Suite

BDxoul 0 learn Wednesday, October 21, 2015

<br />
<section style="background: rgb(248, 248, 248); border: 0px; font-family: 'Open Sans', Helvetica, Arial, sans-serif; font-size: 13px; line-height: 16.003px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
Welcome back, my hacker novitiates!</div>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
HY I had introduced you to two essential tools for cracking online passwords—Tamper Data and THC-Hydra. In that guide, I promised to follow up with another tutorial on how to use THC-Hydra against web forms, so here we go. Although you can use Tamper Data for this purpose, I want to introduce you to a another tool that is built into Kali, Burp Suite.</div>
</section><section style="background: rgb(248, 248, 248); border: 0px; font-family: 'Open Sans', Helvetica, Arial, sans-serif; font-size: 13px; line-height: 16.003px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><h2 class="step" style="background: transparent; border: 0px; font-size: 16px; line-height: 22px; margin: 20px 0px -5px; outline: 0px; padding: 0px 0px 5px; position: relative; text-shadow: rgba(100, 100, 100, 0.34902) 0px 1px 2px; vertical-align: baseline; word-wrap: break-word;">
Step 1: Open THC-Hydra</h2>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
So, let's get started. Fire up <a href="http://null-byte.wonderhowto.com/how-to/hack-like-pro-getting-started-with-kali-your-new-hacking-system-0151631/" style="background: transparent; color: #0c5296; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;">Kali</a> and open THC-Hydra from Applications -> Kali Linux -> Password Attacks -> Online Attacks -> hydra.</div>
<figure class="whtGallery" id="33973821docPartGal880041" role="group" style="background: transparent; border: 0px; margin: 15px 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><div class="gallery-layout" style="background: transparent; border: 0px; height: 399px; margin: 0px; outline: 0px; overflow: visible; padding: 10px 0px; position: relative; vertical-align: baseline;">
<div class="gallery-layout-container" style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; text-align: center; vertical-align: baseline;">
<br />
<figure class="gal-row gal-row-f gal-wa img-shadow" data-index="0" style="background: url(http://img.wonderhowto.com/images/bge3.gif) rgb(227, 227, 227); border: 0px; box-shadow: rgba(0, 0, 0, 0.34902) 0px 0px 5px inset, rgba(100, 100, 100, 0.65098) 0px 1px 4px; height: 399px; margin: 0px auto; outline: 0px; overflow: hidden; padding: 0px; position: relative; vertical-align: baseline; width: 532px;"><a href="http://img.wonderhowto.com/img/original/39/40/63561584064222/0/635615840642223940.jpg" rel="nofollow" style="background: transparent; color: black; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank"><img alt="" src="http://img.wonderhowto.com/img/39/40/63561584064222/0/hack-like-pro-crack-online-web-form-passwords-with-thc-hydra-burp-suite.w654.jpg" style="background: transparent; border: 0px; display: block; height: 399px; margin: auto auto auto 0px; max-width: 532px; outline: 0px; padding: 0px; vertical-align: baseline; width: auto;" /></a></figure></div>
</div>
</figure></section><section style="background: rgb(248, 248, 248); border: 0px; font-family: 'Open Sans', Helvetica, Arial, sans-serif; font-size: 13px; line-height: 16.003px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><h2 class="step" style="background: transparent; border: 0px; font-size: 16px; line-height: 22px; margin: 20px 0px -5px; outline: 0px; padding: 0px 0px 5px; position: relative; text-shadow: rgba(100, 100, 100, 0.34902) 0px 1px 2px; vertical-align: baseline; word-wrap: break-word;">
Step 2: Get the Web Form Parameters</h2>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
To be able to hack web form usernames and passwords, we need to determine the parameters of the web form login page as well as how the form responds to bad/failed logins. The key parameters we must identify are the:</div>
<ul style="background: transparent; border: 0px; list-style-image: none; list-style-position: outside; margin: 10px 0px 15px 30px; outline: 0px; padding: 0px; vertical-align: baseline;">
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">IP Address of the website</li>
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">URL</li>
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">type of form</li>
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">field containing the username</li>
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">field containing the password</li>
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">failure message</li>
</ul>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
We can identify each of these using a proxy such as Tamper Data or Burp Suite.</div>
</section><section style="background: rgb(248, 248, 248); border: 0px; font-family: 'Open Sans', Helvetica, Arial, sans-serif; font-size: 13px; line-height: 16.003px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><h2 class="step" style="background: transparent; border: 0px; font-size: 16px; line-height: 22px; margin: 20px 0px -5px; outline: 0px; padding: 0px 0px 5px; position: relative; text-shadow: rgba(100, 100, 100, 0.34902) 0px 1px 2px; vertical-align: baseline; word-wrap: break-word;">
Step 3: Using Burp Suite</h2>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
Although we can use any proxy to do the job, including Tamper Data, in this post we will use Burp Suite. You can open Burp Suite by going to Applications -> Kali Linux -> Web Applications -> Web Application Proxies -> burpsuite. When you do, you should see the opening screen like below.</div>
<figure class="whtGallery" id="12152546docPartGal880043" role="group" style="background: transparent; border: 0px; margin: 15px 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><div class="gallery-layout" style="background: transparent; border: 0px; height: 361px; margin: 0px; outline: 0px; overflow: visible; padding: 10px 0px; position: relative; vertical-align: baseline;">
<div class="gallery-layout-container" style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; text-align: center; vertical-align: baseline;">
<br />
<figure class="gal-row gal-row-f gal-wa img-shadow" data-index="0" style="background: url(http://img.wonderhowto.com/images/bge3.gif) rgb(227, 227, 227); border: 0px; box-shadow: rgba(0, 0, 0, 0.34902) 0px 0px 5px inset, rgba(100, 100, 100, 0.65098) 0px 1px 4px; height: 361px; margin: 0px auto; outline: 0px; overflow: hidden; padding: 0px; position: relative; vertical-align: baseline; width: 532px;"><a href="http://img.wonderhowto.com/img/original/48/12/63561584079675/0/635615840796754812.jpg" rel="nofollow" style="background: transparent; color: black; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank"><img alt="" src="http://img.wonderhowto.com/img/48/12/63561584079675/0/hack-like-pro-crack-online-web-form-passwords-with-thc-hydra-burp-suite.w654.jpg" style="background: transparent; border: 0px; display: block; height: 361px; margin: auto auto auto 0px; max-width: 532px; outline: 0px; padding: 0px; vertical-align: baseline; width: auto;" /></a></figure></div>
</div>
</figure><div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
Next, we will be attempting to crack the password on the Damn Vulnerable Web Application (DVWA). You can run it from the Metasploitable operating system (<a href="https://information.rapid7.com/metasploitable-download.html" rel="nofollow" style="background: transparent; color: #0c5296; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">available at Rapid7</a>) and then connecting to its login page, as I have here.</div>
<figure class="whtGallery" id="47809607docPartGal880045" role="group" style="background: transparent; border: 0px; margin: 15px 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><div class="gallery-layout" style="background: transparent; border: 0px; height: 361px; margin: 0px; outline: 0px; overflow: visible; padding: 10px 0px; position: relative; vertical-align: baseline;">
<div class="gallery-layout-container" style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; text-align: center; vertical-align: baseline;">
<br />
<figure class="gal-row gal-row-f gal-wa img-shadow" data-index="0" style="background: url(http://img.wonderhowto.com/images/bge3.gif) rgb(227, 227, 227); border: 0px; box-shadow: rgba(0, 0, 0, 0.34902) 0px 0px 5px inset, rgba(100, 100, 100, 0.65098) 0px 1px 4px; height: 361px; margin: 0px auto; outline: 0px; overflow: hidden; padding: 0px; position: relative; vertical-align: baseline; width: 532px;"><a href="http://img.wonderhowto.com/img/original/93/87/63561584110612/0/635615841106129387.jpg" rel="nofollow" style="background: transparent; color: black; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank"><img alt="" src="http://img.wonderhowto.com/img/93/87/63561584110612/0/hack-like-pro-crack-online-web-form-passwords-with-thc-hydra-burp-suite.w654.jpg" style="background: transparent; border: 0px; display: block; height: 361px; margin: auto auto auto 0px; max-width: 532px; outline: 0px; padding: 0px; vertical-align: baseline; width: auto;" /></a></figure></div>
</div>
</figure><div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
We need to enable the <em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Proxy</em> and <em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Intercept</em> on the Burp Suite like I have below. Make sure to click on the <em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Proxy</em> tab at the top and then <em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Intercept</em> on the second row of tabs. Make certain that the "Intercept is on."</div>
<figure class="whtGallery" id="42991519docPartGal880047" role="group" style="background: transparent; border: 0px; margin: 15px 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><div class="gallery-layout" style="background: transparent; border: 0px; height: 273px; margin: 0px; outline: 0px; overflow: visible; padding: 10px 0px; position: relative; vertical-align: baseline;">
<div class="gallery-layout-container" style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; text-align: center; vertical-align: baseline;">
<br />
<figure class="gal-row gal-row-f gal-wa img-shadow" data-index="0" style="background: url(http://img.wonderhowto.com/images/bge3.gif) rgb(227, 227, 227); border: 0px; box-shadow: rgba(0, 0, 0, 0.34902) 0px 0px 5px inset, rgba(100, 100, 100, 0.65098) 0px 1px 4px; height: 273px; margin: 0px auto; outline: 0px; overflow: hidden; padding: 0px; position: relative; vertical-align: baseline; width: 532px;"><a href="http://img.wonderhowto.com/img/original/10/87/63561584124441/0/635615841244411087.jpg" rel="nofollow" style="background: transparent; color: black; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank"><img alt="" src="http://img.wonderhowto.com/img/10/87/63561584124441/0/hack-like-pro-crack-online-web-form-passwords-with-thc-hydra-burp-suite.w654.jpg" style="background: transparent; border: 0px; display: block; height: 273px; margin: auto auto auto 0px; max-width: 532px; outline: 0px; padding: 0px; vertical-align: baseline; width: auto;" /></a></figure></div>
</div>
</figure><div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
Last, we need to configure our IceWeasel web browser to use a proxy. We can go to Edit -> Preferences -> Advanced -> Network -> Settings to open the Connection Settings, as seen below. There, configure IceWeasel to use 127.0.0.1 port 8080 as a proxy by typing in 127.0.0.1 in the <em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">HTTP Proxy</em> field, 8080 in the <em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Port</em> field and delete any information in the <em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">No Proxy for</em> field at the bottom. Also, select the "Use this proxy server for all protocols" button.</div>
<figure class="whtGallery" id="21994166docPartGal880049" role="group" style="background: transparent; border: 0px; margin: 15px 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><div class="gallery-layout" style="background: transparent; border: 0px; height: 383px; margin: 0px; outline: 0px; overflow: visible; padding: 10px 0px; position: relative; vertical-align: baseline;">
<div class="gallery-layout-container" style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; text-align: center; vertical-align: baseline;">
<br />
<figure class="gal-row gal-row-f gal-wa img-shadow" data-index="0" style="background: url(http://img.wonderhowto.com/images/bge3.gif) rgb(227, 227, 227); border: 0px; box-shadow: rgba(0, 0, 0, 0.34902) 0px 0px 5px inset, rgba(100, 100, 100, 0.65098) 0px 1px 4px; height: 383px; margin: 0px auto; outline: 0px; overflow: hidden; padding: 0px; position: relative; vertical-align: baseline; width: 532px;"><a href="http://img.wonderhowto.com/img/original/95/31/63561584136862/0/635615841368629531.jpg" rel="nofollow" style="background: transparent; color: black; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank"><img alt="" src="http://img.wonderhowto.com/img/95/31/63561584136862/0/hack-like-pro-crack-online-web-form-passwords-with-thc-hydra-burp-suite.w654.jpg" style="background: transparent; border: 0px; display: block; height: 383px; margin: auto auto auto 0px; max-width: 532px; outline: 0px; padding: 0px; vertical-align: baseline; width: auto;" /></a></figure></div>
</div>
</figure></section><section style="background: rgb(248, 248, 248); border: 0px; font-family: 'Open Sans', Helvetica, Arial, sans-serif; font-size: 13px; line-height: 16.003px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><h2 class="step" style="background: transparent; border: 0px; font-size: 16px; line-height: 22px; margin: 20px 0px -5px; outline: 0px; padding: 0px 0px 5px; position: relative; text-shadow: rgba(100, 100, 100, 0.34902) 0px 1px 2px; vertical-align: baseline; word-wrap: break-word;">
Step 4: Get the Bad Login Response</h2>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
Now, let's try to log in with my username OTW and password OTW. When I do so, the BurpSuite intercepts the request and shows us the key fields we need for a THC-Hydra web form crack.</div>
<figure class="whtGallery" id="10850874docPartGal880051" role="group" style="background: transparent; border: 0px; margin: 15px 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><div class="gallery-layout" style="background: transparent; border: 0px; height: 343px; margin: 0px; outline: 0px; overflow: visible; padding: 10px 0px; position: relative; vertical-align: baseline;">
<div class="gallery-layout-container" style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; text-align: center; vertical-align: baseline;">
<br />
<figure class="gal-row gal-row-f gal-wa img-shadow" data-index="0" style="background: url(http://img.wonderhowto.com/images/bge3.gif) rgb(227, 227, 227); border: 0px; box-shadow: rgba(0, 0, 0, 0.34902) 0px 0px 5px inset, rgba(100, 100, 100, 0.65098) 0px 1px 4px; height: 343px; margin: 0px auto; outline: 0px; overflow: hidden; padding: 0px; position: relative; vertical-align: baseline; width: 532px;"><a href="http://img.wonderhowto.com/img/original/61/28/63561584149378/0/635615841493786128.jpg" rel="nofollow" style="background: transparent; color: black; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank"><img alt="" src="http://img.wonderhowto.com/img/61/28/63561584149378/0/hack-like-pro-crack-online-web-form-passwords-with-thc-hydra-burp-suite.w654.jpg" style="background: transparent; border: 0px; display: block; height: 343px; margin: auto auto auto 0px; max-width: 532px; outline: 0px; padding: 0px; vertical-align: baseline; width: auto;" /></a></figure></div>
</div>
</figure><div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
After collecting this information, I then forward the request from Burp Suite by hitting the "Forward" button to the far left . The DVWA returns a message that the "Login failed." Now, I have all the information I need to configure THC-Hydra to crack this web app!</div>
<figure class="whtGallery" id="33204008docPartGal880053" role="group" style="background: transparent; border: 0px; margin: 15px 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><div class="gallery-layout" style="background: transparent; border: 0px; height: 416px; margin: 0px; outline: 0px; overflow: visible; padding: 10px 0px; position: relative; vertical-align: baseline;">
<div class="gallery-layout-container" style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; text-align: center; vertical-align: baseline;">
<br />
<figure class="gal-row gal-row-f gal-wa img-shadow" data-index="0" style="background: url(http://img.wonderhowto.com/images/bge3.gif) rgb(227, 227, 227); border: 0px; box-shadow: rgba(0, 0, 0, 0.34902) 0px 0px 5px inset, rgba(100, 100, 100, 0.65098) 0px 1px 4px; height: 416px; margin: 0px auto; outline: 0px; overflow: hidden; padding: 0px; position: relative; vertical-align: baseline; width: 532px;"><a href="http://img.wonderhowto.com/img/original/05/04/63561584166035/0/635615841660350504.jpg" rel="nofollow" style="background: transparent; color: black; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank"><img alt="" src="http://img.wonderhowto.com/img/05/04/63561584166035/0/hack-like-pro-crack-online-web-form-passwords-with-thc-hydra-burp-suite.w654.jpg" style="background: transparent; border: 0px; display: block; height: 416px; margin: auto auto auto 0px; max-width: 532px; outline: 0px; padding: 0px; vertical-align: baseline; width: auto;" /></a></figure></div>
</div>
</figure><div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
Getting the failure message is key to getting THC-Hydra to work on web forms. In this case, it is a text-based message, but it won't always be. At times it may be a cookie, but the critical part is finding out how the application communicates a failed login. In this way, we can tell THC-Hydra to keep trying different passwords; only when that message does not appear, have we succeeded.</div>
</section><section style="background: rgb(248, 248, 248); border: 0px; font-family: 'Open Sans', Helvetica, Arial, sans-serif; font-size: 13px; line-height: 16.003px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><h2 class="step" style="background: transparent; border: 0px; font-size: 16px; line-height: 22px; margin: 20px 0px -5px; outline: 0px; padding: 0px 0px 5px; position: relative; text-shadow: rgba(100, 100, 100, 0.34902) 0px 1px 2px; vertical-align: baseline; word-wrap: break-word;">
Step 5: Place the Parameters into Your THC Hydra Command</h2>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
Now, that we have the parameters, we can place them into the THC-Hydra command. The syntax looks like this:</div>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
<em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">kali > hydra -L <username list> -p <password list> <IP Address> <form parameters><failed login message></strong></em></div>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
So, based on the information we have gathered from Burp Suite, our command should look something like this:</div>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
<em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">kali >hydra -L <wordlist> -P<password list><br />192.168.1.101 http-post-form "/dvwa/login.php:username=^USER^&password=^PASS^&Login=Login:Login failed"</strong></em></div>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
A few things to note. First, you use the upper case "L" if you are using a username list and a lower case "l" if you are trying to crack one username that you supply there. In this case, I will be using the lower case "l " as I will only be trying to crack the "admin" password.</div>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
After the address of the login form (<em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">/dvwa/login.php</em>), the next field is the name of the field that takes the username. In our case, it is "username," but on some forms it might be something different, such as "login."</div>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
Now, let's put together a command that will crack this web form login.</div>
</section><section style="background: rgb(248, 248, 248); border: 0px; font-family: 'Open Sans', Helvetica, Arial, sans-serif; font-size: 13px; line-height: 16.003px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><h2 class="step" style="background: transparent; border: 0px; font-size: 16px; line-height: 22px; margin: 20px 0px -5px; outline: 0px; padding: 0px 0px 5px; position: relative; text-shadow: rgba(100, 100, 100, 0.34902) 0px 1px 2px; vertical-align: baseline; word-wrap: break-word;">
Step 6: Choose a Wordlist</h2>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
Now, we need to chose a wordlist. As with any dictionary attack, the wordlist is key. You can use a custom one made with <a href="http://null-byte.wonderhowto.com/how-to/hack-like-pro-crack-passwords-part-4-creating-custom-wordlist-with-crunch-0156817/" style="background: transparent; color: #0c5296; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;">Crunch</a> of <a href="http://null-byte.wonderhowto.com/how-to/hack-like-pro-crack-passwords-part-5-creating-custom-wordlist-with-cewl-0158855/" style="background: transparent; color: #0c5296; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;">CeWL</a>, but Kali has numerous wordlists built right in. To see them all, simply type:</div>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
<em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">kali > locate wordlist</strong></em></div>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
In addition, there are numerous online sites with wordlists that can be up to 100 GB! Choose wisely, my hacker novitiates. In this case, I will be using a built-in wordlist with less than 1,000 words at:</div>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
<em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">/usr/share/dirb/wordlists/short.txt</strong></em></div>
</section><section style="background: rgb(248, 248, 248); border: 0px; font-family: 'Open Sans', Helvetica, Arial, sans-serif; font-size: 13px; line-height: 16.003px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><h2 class="step" style="background: transparent; border: 0px; font-size: 16px; line-height: 22px; margin: 20px 0px -5px; outline: 0px; padding: 0px 0px 5px; position: relative; text-shadow: rgba(100, 100, 100, 0.34902) 0px 1px 2px; vertical-align: baseline; word-wrap: break-word;">
Step 7: Build the Command</h2>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
Now, let's build our command with all of these elements, as seen below.</div>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
<em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">kali > hydra -l admin -P /usr/share/dirb/wordlists/small.txt 192.168.1.101 http-post-form "/dvwa/login.php:username=^USER^&password=^PASS^&Login=Login:Login failed" -V</strong></em></div>
<figure class="whtGallery" id="6399416docPartGal880055" role="group" style="background: transparent; border: 0px; margin: 15px 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><div class="gallery-layout" style="background: transparent; border: 0px; height: 89px; margin: 0px; outline: 0px; overflow: visible; padding: 10px 0px; position: relative; vertical-align: baseline;">
<div class="gallery-layout-container" style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; text-align: center; vertical-align: baseline;">
<br />
<figure class="gal-row gal-row-f gal-wa img-shadow" data-index="0" style="background: url(http://img.wonderhowto.com/images/bge3.gif) rgb(227, 227, 227); border: 0px; box-shadow: rgba(0, 0, 0, 0.34902) 0px 0px 5px inset, rgba(100, 100, 100, 0.65098) 0px 1px 4px; height: 89px; margin: 0px auto; outline: 0px; overflow: hidden; padding: 0px; position: relative; vertical-align: baseline; width: 532px;"><a href="http://img.wonderhowto.com/img/original/50/71/63561584187175/0/635615841871755071.jpg" rel="nofollow" style="background: transparent; color: black; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank"><img alt="" src="http://img.wonderhowto.com/img/50/71/63561584187175/0/hack-like-pro-crack-online-web-form-passwords-with-thc-hydra-burp-suite.w654.jpg" style="background: transparent; border: 0px; display: block; height: 89px; margin: auto auto auto 0px; max-width: 532px; outline: 0px; padding: 0px; vertical-align: baseline; width: auto;" /></a></figure></div>
</div>
</figure><ul style="background: transparent; border: 0px; list-style-image: none; list-style-position: outside; margin: 10px 0px 15px 30px; outline: 0px; padding: 0px; vertical-align: baseline;">
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">-l</strong> indicates a single username (use <strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">-L</strong> for a username list)</li>
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">-P</strong> indicates use the following password list</li>
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">http-post-form</strong> indicates the type of form</li>
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">/dvwa/login-php</strong> is the login page URL</li>
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">username</strong> is the form field where the username is entered</li>
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">^USER^</strong> tells Hydra to use the username or list in the field</li>
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">password</strong> is the form field where the password is entered (it may be passwd, pass, etc.)</li>
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">^PASS^</strong> tells Hydra to use the password list supplied</li>
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Login</strong> indicates to Hydra the login failed message</li>
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Login failed</strong> is the login failure message that the form returned</li>
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">-V</strong> is for verbose output showing every attempt</li>
</ul>
</section><section style="background: rgb(248, 248, 248); border: 0px; font-family: 'Open Sans', Helvetica, Arial, sans-serif; font-size: 13px; line-height: 16.003px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><h2 class="step" style="background: transparent; border: 0px; font-size: 16px; line-height: 22px; margin: 20px 0px -5px; outline: 0px; padding: 0px 0px 5px; position: relative; text-shadow: rgba(100, 100, 100, 0.34902) 0px 1px 2px; vertical-align: baseline; word-wrap: break-word;">
Step 8: Let Her Fly!</h2>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
Now, let her fly! Since we used the <strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">-V</em></strong> switch, THC-Hydra will show us every attempt.</div>
<figure class="whtGallery" id="43721451docPartGal880057" role="group" style="background: transparent; border: 0px; margin: 15px 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><div class="gallery-layout" style="background: transparent; border: 0px; height: 317px; margin: 0px; outline: 0px; overflow: visible; padding: 10px 0px; position: relative; vertical-align: baseline;">
<div class="gallery-layout-container" style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; text-align: center; vertical-align: baseline;">
<br />
<figure class="gal-row gal-row-f gal-wa img-shadow" data-index="0" style="background: url(http://img.wonderhowto.com/images/bge3.gif) rgb(227, 227, 227); border: 0px; box-shadow: rgba(0, 0, 0, 0.34902) 0px 0px 5px inset, rgba(100, 100, 100, 0.65098) 0px 1px 4px; height: 317px; margin: 0px auto; outline: 0px; overflow: hidden; padding: 0px; position: relative; vertical-align: baseline; width: 532px;"><a href="http://img.wonderhowto.com/img/original/86/89/63561584198909/0/635615841989098689.jpg" rel="nofollow" style="background: transparent; color: black; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank"><img alt="" src="http://img.wonderhowto.com/img/86/89/63561584198909/0/hack-like-pro-crack-online-web-form-passwords-with-thc-hydra-burp-suite.w654.jpg" style="background: transparent; border: 0px; display: block; height: 317px; margin: auto auto auto 0px; max-width: 532px; outline: 0px; padding: 0px; vertical-align: baseline; width: auto;" /></a></figure></div>
</div>
</figure><div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
After a few minutes, Hydra returns with the password for our web application. Success!</div>
<figure class="whtGallery" id="17019152docPartGal880059" role="group" style="background: transparent; border: 0px; margin: 15px 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><div class="gallery-layout" style="background: transparent; border: 0px; height: 56px; margin: 0px; outline: 0px; overflow: visible; padding: 10px 0px; position: relative; vertical-align: baseline;">
<div class="gallery-layout-container" style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; text-align: center; vertical-align: baseline;">
<br />
<figure class="gal-row gal-row-f gal-wa img-shadow" data-index="0" style="background: url(http://img.wonderhowto.com/images/bge3.gif) rgb(227, 227, 227); border: 0px; box-shadow: rgba(0, 0, 0, 0.34902) 0px 0px 5px inset, rgba(100, 100, 100, 0.65098) 0px 1px 4px; height: 56px; margin: 0px auto; outline: 0px; overflow: hidden; padding: 0px; position: relative; vertical-align: baseline; width: 532px;"><a href="http://img.wonderhowto.com/img/original/28/14/63561584210316/0/635615842103162814.jpg" rel="nofollow" style="background: transparent; color: black; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank"><img alt="" src="http://img.wonderhowto.com/img/28/14/63561584210316/0/hack-like-pro-crack-online-web-form-passwords-with-thc-hydra-burp-suite.w654.jpg" style="background: transparent; border: 0px; display: block; height: 56px; margin: auto auto auto 0px; max-width: 532px; outline: 0px; padding: 0px; vertical-align: baseline; width: auto;" /></a></figure></div>
</div>
</figure></section><section style="background: rgb(248, 248, 248); border: 0px; font-family: 'Open Sans', Helvetica, Arial, sans-serif; font-size: 13px; line-height: 16.003px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><h2 class="sectionHeadline" style="background: transparent; border: 0px; font-size: 16px; line-height: 22px; margin: 20px 0px -5px; outline: 0px; padding: 0px 0px 5px; position: relative; text-shadow: rgba(100, 100, 100, 0.34902) 0px 1px 2px; vertical-align: baseline; word-wrap: break-word;">
Final Thoughts</h2>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
Although THC-Hydra is an effective and excellent tool for online <a href="http://null-byte.wonderhowto.com/how-to/password-cracking/" style="background: transparent; color: #0c5296; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;">password cracking</a>, when using it in web forms, it takes a bit of practice. The key to successfully using it in web forms is determining how the form responds differently to a failed login versus a successful login. In the example above, we identified the failed login message, but we could have identified the successful message and used that instead. To use the successful message, we would replace the failed login message with "S=successful message" such as this:</div>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
<em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">kali > hydra -l admin -P /usr/share/dirb/wordlists/small.txt 192.168.1.101 http-post-form "/dvwa/login.php:username=^USER^&password=^PASS^&S=success message" -V</strong></em></div>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
Also, some web servers will notice many rapid failed attempts at logging in and lock you out. In this case, you will want to use the wait function in THC-Hydra. This will add a wait between attempts so as not to trigger the lockout. You can use this functionality with the <strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">-w</em></strong> switch, so we revise our command to wait 10 seconds between attempts by writing it:</div>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
<em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">kali > hydra -l admin -P /usr/share/dirb/wordlists/small.txt 192.168.1.101 http-post-form "/dvwa/login.php:username=^USER^&password=^PASS^&Login=Login:Login failed" -w 10 -V</strong></em></div>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
I recommend that you practice the use of THC-Hydra on forms where you know the username and password before using it out "in the wild."</div>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
Keep coming back, my hacker novitiates, as we continue to expand your repertoire of hacker techniques and arts!</div>
</section><section style="background: rgb(248, 248, 248); border: 0px; font-family: 'Open Sans', Helvetica, Arial, sans-serif; font-size: 13px; line-height: 16.003px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><small class="image-credits" style="background: transparent; border: 0px; color: #aaaaaa; display: block; font-size: 11px; font-style: italic; line-height: 15px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Cover image via <a href="http://www.shutterstock.com/pic-121736164/stock-vector-vector-login-background.html" rel="nofollow" style="background: transparent; color: #999999; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">Shutterstock</a></small><small class="image-credits" style="background: transparent; border: 0px; color: #aaaaaa; display: block; font-size: 11px; font-style: italic; line-height: 15px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Source : http://null-byte.wonderhowto.com/</small></section>

Hack Like a Pro: How to Crack Online Web Form Passwords with THC-Hydra & Burp Suite

Welcome back, my hacker novitiates! HY I had introduced you to two essential tools for cracking online passwords—Tamper Data and THC-Hyd...

Hack Like a Pro: How to Crack Online Web Form Passwords with THC-Hydra & Burp Suite

BDxoul 0 learn

<section style="background: rgb(248, 248, 248); border: 0px; font-family: 'Open Sans', Helvetica, Arial, sans-serif; font-size: 13px; line-height: 16.003px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
Welcome back, my hacker novitiates!</div>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
HY I had introduced you to two essential tools for cracking online passwords—Tamper Data and THC-Hydra. In that guide, I promised to follow up with another tutorial on how to use THC-Hydra against web forms, so here we go. Although you can use Tamper Data for this purpose, I want to introduce you to a another tool that is built into Kali, Burp Suite.</div>
</section><section style="background: rgb(248, 248, 248); border: 0px; font-family: 'Open Sans', Helvetica, Arial, sans-serif; font-size: 13px; line-height: 16.003px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><h2 class="step" style="background: transparent; border: 0px; font-size: 16px; line-height: 22px; margin: 20px 0px -5px; outline: 0px; padding: 0px 0px 5px; position: relative; text-shadow: rgba(100, 100, 100, 0.34902) 0px 1px 2px; vertical-align: baseline; word-wrap: break-word;">
Step 1: Open THC-Hydra</h2>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
So, let's get started. Fire up <a href="http://null-byte.wonderhowto.com/how-to/hack-like-pro-getting-started-with-kali-your-new-hacking-system-0151631/" style="background: transparent; color: #0c5296; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;">Kali</a> and open THC-Hydra from Applications -> Kali Linux -> Password Attacks -> Online Attacks -> hydra.</div>
<figure class="whtGallery" id="33973821docPartGal880041" role="group" style="background: transparent; border: 0px; margin: 15px 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><div class="gallery-layout" style="background: transparent; border: 0px; height: 399px; margin: 0px; outline: 0px; overflow: visible; padding: 10px 0px; position: relative; vertical-align: baseline;">
<div class="gallery-layout-container" style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; text-align: center; vertical-align: baseline;">
<figure class="gal-row gal-row-f gal-wa img-shadow" data-index="0" style="background: url(http://img.wonderhowto.com/images/bge3.gif) rgb(227, 227, 227); border: 0px; box-shadow: rgba(0, 0, 0, 0.34902) 0px 0px 5px inset, rgba(100, 100, 100, 0.65098) 0px 1px 4px; height: 399px; margin: 0px auto; outline: 0px; overflow: hidden; padding: 0px; position: relative; vertical-align: baseline; width: 532px;"><a href="http://img.wonderhowto.com/img/original/39/40/63561584064222/0/635615840642223940.jpg" rel="nofollow" style="background: transparent; color: black; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank"><img alt="" src="http://img.wonderhowto.com/img/39/40/63561584064222/0/hack-like-pro-crack-online-web-form-passwords-with-thc-hydra-burp-suite.w654.jpg" style="background: transparent; border: 0px; display: block; height: 399px; margin: auto auto auto 0px; max-width: 532px; outline: 0px; padding: 0px; vertical-align: baseline; width: auto;" /></a></figure></div>
</div>
</figure></section><section style="background: rgb(248, 248, 248); border: 0px; font-family: 'Open Sans', Helvetica, Arial, sans-serif; font-size: 13px; line-height: 16.003px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><h2 class="step" style="background: transparent; border: 0px; font-size: 16px; line-height: 22px; margin: 20px 0px -5px; outline: 0px; padding: 0px 0px 5px; position: relative; text-shadow: rgba(100, 100, 100, 0.34902) 0px 1px 2px; vertical-align: baseline; word-wrap: break-word;">
Step 2: Get the Web Form Parameters</h2>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
To be able to hack web form usernames and passwords, we need to determine the parameters of the web form login page as well as how the form responds to bad/failed logins. The key parameters we must identify are the:</div>
<ul style="background: transparent; border: 0px; list-style-image: none; list-style-position: outside; margin: 10px 0px 15px 30px; outline: 0px; padding: 0px; vertical-align: baseline;">
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">IP Address of the website</li>
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">URL</li>
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">type of form</li>
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">field containing the username</li>
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">field containing the password</li>
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">failure message</li>
</ul>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
We can identify each of these using a proxy such as Tamper Data or Burp Suite.</div>
</section><section style="background: rgb(248, 248, 248); border: 0px; font-family: 'Open Sans', Helvetica, Arial, sans-serif; font-size: 13px; line-height: 16.003px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><h2 class="step" style="background: transparent; border: 0px; font-size: 16px; line-height: 22px; margin: 20px 0px -5px; outline: 0px; padding: 0px 0px 5px; position: relative; text-shadow: rgba(100, 100, 100, 0.34902) 0px 1px 2px; vertical-align: baseline; word-wrap: break-word;">
Step 3: Using Burp Suite</h2>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
Although we can use any proxy to do the job, including Tamper Data, in this post we will use Burp Suite. You can open Burp Suite by going to Applications -> Kali Linux -> Web Applications -> Web Application Proxies -> burpsuite. When you do, you should see the opening screen like below.</div>
<figure class="whtGallery" id="12152546docPartGal880043" role="group" style="background: transparent; border: 0px; margin: 15px 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><div class="gallery-layout" style="background: transparent; border: 0px; height: 361px; margin: 0px; outline: 0px; overflow: visible; padding: 10px 0px; position: relative; vertical-align: baseline;">
<div class="gallery-layout-container" style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; text-align: center; vertical-align: baseline;">
<figure class="gal-row gal-row-f gal-wa img-shadow" data-index="0" style="background: url(http://img.wonderhowto.com/images/bge3.gif) rgb(227, 227, 227); border: 0px; box-shadow: rgba(0, 0, 0, 0.34902) 0px 0px 5px inset, rgba(100, 100, 100, 0.65098) 0px 1px 4px; height: 361px; margin: 0px auto; outline: 0px; overflow: hidden; padding: 0px; position: relative; vertical-align: baseline; width: 532px;"><a href="http://img.wonderhowto.com/img/original/48/12/63561584079675/0/635615840796754812.jpg" rel="nofollow" style="background: transparent; color: black; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank"><img alt="" src="http://img.wonderhowto.com/img/48/12/63561584079675/0/hack-like-pro-crack-online-web-form-passwords-with-thc-hydra-burp-suite.w654.jpg" style="background: transparent; border: 0px; display: block; height: 361px; margin: auto auto auto 0px; max-width: 532px; outline: 0px; padding: 0px; vertical-align: baseline; width: auto;" /></a></figure></div>
</div>
</figure><div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
Next, we will be attempting to crack the password on the Damn Vulnerable Web Application (DVWA). You can run it from the Metasploitable operating system (<a href="https://information.rapid7.com/metasploitable-download.html" rel="nofollow" style="background: transparent; color: #0c5296; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">available at Rapid7</a>) and then connecting to its login page, as I have here.</div>
<figure class="whtGallery" id="47809607docPartGal880045" role="group" style="background: transparent; border: 0px; margin: 15px 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><div class="gallery-layout" style="background: transparent; border: 0px; height: 361px; margin: 0px; outline: 0px; overflow: visible; padding: 10px 0px; position: relative; vertical-align: baseline;">
<div class="gallery-layout-container" style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; text-align: center; vertical-align: baseline;">
<figure class="gal-row gal-row-f gal-wa img-shadow" data-index="0" style="background: url(http://img.wonderhowto.com/images/bge3.gif) rgb(227, 227, 227); border: 0px; box-shadow: rgba(0, 0, 0, 0.34902) 0px 0px 5px inset, rgba(100, 100, 100, 0.65098) 0px 1px 4px; height: 361px; margin: 0px auto; outline: 0px; overflow: hidden; padding: 0px; position: relative; vertical-align: baseline; width: 532px;"><a href="http://img.wonderhowto.com/img/original/93/87/63561584110612/0/635615841106129387.jpg" rel="nofollow" style="background: transparent; color: black; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank"><img alt="" src="http://img.wonderhowto.com/img/93/87/63561584110612/0/hack-like-pro-crack-online-web-form-passwords-with-thc-hydra-burp-suite.w654.jpg" style="background: transparent; border: 0px; display: block; height: 361px; margin: auto auto auto 0px; max-width: 532px; outline: 0px; padding: 0px; vertical-align: baseline; width: auto;" /></a></figure></div>
</div>
</figure><div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
We need to enable the <em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Proxy</em> and <em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Intercept</em> on the Burp Suite like I have below. Make sure to click on the <em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Proxy</em> tab at the top and then <em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Intercept</em> on the second row of tabs. Make certain that the "Intercept is on."</div>
<figure class="whtGallery" id="42991519docPartGal880047" role="group" style="background: transparent; border: 0px; margin: 15px 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><div class="gallery-layout" style="background: transparent; border: 0px; height: 273px; margin: 0px; outline: 0px; overflow: visible; padding: 10px 0px; position: relative; vertical-align: baseline;">
<div class="gallery-layout-container" style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; text-align: center; vertical-align: baseline;">
<figure class="gal-row gal-row-f gal-wa img-shadow" data-index="0" style="background: url(http://img.wonderhowto.com/images/bge3.gif) rgb(227, 227, 227); border: 0px; box-shadow: rgba(0, 0, 0, 0.34902) 0px 0px 5px inset, rgba(100, 100, 100, 0.65098) 0px 1px 4px; height: 273px; margin: 0px auto; outline: 0px; overflow: hidden; padding: 0px; position: relative; vertical-align: baseline; width: 532px;"><a href="http://img.wonderhowto.com/img/original/10/87/63561584124441/0/635615841244411087.jpg" rel="nofollow" style="background: transparent; color: black; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank"><img alt="" src="http://img.wonderhowto.com/img/10/87/63561584124441/0/hack-like-pro-crack-online-web-form-passwords-with-thc-hydra-burp-suite.w654.jpg" style="background: transparent; border: 0px; display: block; height: 273px; margin: auto auto auto 0px; max-width: 532px; outline: 0px; padding: 0px; vertical-align: baseline; width: auto;" /></a></figure></div>
</div>
</figure><div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
Last, we need to configure our IceWeasel web browser to use a proxy. We can go to Edit -> Preferences -> Advanced -> Network -> Settings to open the Connection Settings, as seen below. There, configure IceWeasel to use 127.0.0.1 port 8080 as a proxy by typing in 127.0.0.1 in the <em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">HTTP Proxy</em> field, 8080 in the <em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Port</em> field and delete any information in the <em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">No Proxy for</em> field at the bottom. Also, select the "Use this proxy server for all protocols" button.</div>
<figure class="whtGallery" id="21994166docPartGal880049" role="group" style="background: transparent; border: 0px; margin: 15px 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><div class="gallery-layout" style="background: transparent; border: 0px; height: 383px; margin: 0px; outline: 0px; overflow: visible; padding: 10px 0px; position: relative; vertical-align: baseline;">
<div class="gallery-layout-container" style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; text-align: center; vertical-align: baseline;">
<figure class="gal-row gal-row-f gal-wa img-shadow" data-index="0" style="background: url(http://img.wonderhowto.com/images/bge3.gif) rgb(227, 227, 227); border: 0px; box-shadow: rgba(0, 0, 0, 0.34902) 0px 0px 5px inset, rgba(100, 100, 100, 0.65098) 0px 1px 4px; height: 383px; margin: 0px auto; outline: 0px; overflow: hidden; padding: 0px; position: relative; vertical-align: baseline; width: 532px;"><a href="http://img.wonderhowto.com/img/original/95/31/63561584136862/0/635615841368629531.jpg" rel="nofollow" style="background: transparent; color: black; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank"><img alt="" src="http://img.wonderhowto.com/img/95/31/63561584136862/0/hack-like-pro-crack-online-web-form-passwords-with-thc-hydra-burp-suite.w654.jpg" style="background: transparent; border: 0px; display: block; height: 383px; margin: auto auto auto 0px; max-width: 532px; outline: 0px; padding: 0px; vertical-align: baseline; width: auto;" /></a></figure></div>
</div>
</figure></section><section style="background: rgb(248, 248, 248); border: 0px; font-family: 'Open Sans', Helvetica, Arial, sans-serif; font-size: 13px; line-height: 16.003px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><h2 class="step" style="background: transparent; border: 0px; font-size: 16px; line-height: 22px; margin: 20px 0px -5px; outline: 0px; padding: 0px 0px 5px; position: relative; text-shadow: rgba(100, 100, 100, 0.34902) 0px 1px 2px; vertical-align: baseline; word-wrap: break-word;">
Step 4: Get the Bad Login Response</h2>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
Now, let's try to log in with my username OTW and password OTW. When I do so, the BurpSuite intercepts the request and shows us the key fields we need for a THC-Hydra web form crack.</div>
<figure class="whtGallery" id="10850874docPartGal880051" role="group" style="background: transparent; border: 0px; margin: 15px 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><div class="gallery-layout" style="background: transparent; border: 0px; height: 343px; margin: 0px; outline: 0px; overflow: visible; padding: 10px 0px; position: relative; vertical-align: baseline;">
<div class="gallery-layout-container" style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; text-align: center; vertical-align: baseline;">
<figure class="gal-row gal-row-f gal-wa img-shadow" data-index="0" style="background: url(http://img.wonderhowto.com/images/bge3.gif) rgb(227, 227, 227); border: 0px; box-shadow: rgba(0, 0, 0, 0.34902) 0px 0px 5px inset, rgba(100, 100, 100, 0.65098) 0px 1px 4px; height: 343px; margin: 0px auto; outline: 0px; overflow: hidden; padding: 0px; position: relative; vertical-align: baseline; width: 532px;"><a href="http://img.wonderhowto.com/img/original/61/28/63561584149378/0/635615841493786128.jpg" rel="nofollow" style="background: transparent; color: black; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank"><img alt="" src="http://img.wonderhowto.com/img/61/28/63561584149378/0/hack-like-pro-crack-online-web-form-passwords-with-thc-hydra-burp-suite.w654.jpg" style="background: transparent; border: 0px; display: block; height: 343px; margin: auto auto auto 0px; max-width: 532px; outline: 0px; padding: 0px; vertical-align: baseline; width: auto;" /></a></figure></div>
</div>
</figure><div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
After collecting this information, I then forward the request from Burp Suite by hitting the "Forward" button to the far left . The DVWA returns a message that the "Login failed." Now, I have all the information I need to configure THC-Hydra to crack this web app!</div>
<figure class="whtGallery" id="33204008docPartGal880053" role="group" style="background: transparent; border: 0px; margin: 15px 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><div class="gallery-layout" style="background: transparent; border: 0px; height: 416px; margin: 0px; outline: 0px; overflow: visible; padding: 10px 0px; position: relative; vertical-align: baseline;">
<div class="gallery-layout-container" style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; text-align: center; vertical-align: baseline;">
<figure class="gal-row gal-row-f gal-wa img-shadow" data-index="0" style="background: url(http://img.wonderhowto.com/images/bge3.gif) rgb(227, 227, 227); border: 0px; box-shadow: rgba(0, 0, 0, 0.34902) 0px 0px 5px inset, rgba(100, 100, 100, 0.65098) 0px 1px 4px; height: 416px; margin: 0px auto; outline: 0px; overflow: hidden; padding: 0px; position: relative; vertical-align: baseline; width: 532px;"><a href="http://img.wonderhowto.com/img/original/05/04/63561584166035/0/635615841660350504.jpg" rel="nofollow" style="background: transparent; color: black; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank"><img alt="" src="http://img.wonderhowto.com/img/05/04/63561584166035/0/hack-like-pro-crack-online-web-form-passwords-with-thc-hydra-burp-suite.w654.jpg" style="background: transparent; border: 0px; display: block; height: 416px; margin: auto auto auto 0px; max-width: 532px; outline: 0px; padding: 0px; vertical-align: baseline; width: auto;" /></a></figure></div>
</div>
</figure><div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
Getting the failure message is key to getting THC-Hydra to work on web forms. In this case, it is a text-based message, but it won't always be. At times it may be a cookie, but the critical part is finding out how the application communicates a failed login. In this way, we can tell THC-Hydra to keep trying different passwords; only when that message does not appear, have we succeeded.</div>
</section><section style="background: rgb(248, 248, 248); border: 0px; font-family: 'Open Sans', Helvetica, Arial, sans-serif; font-size: 13px; line-height: 16.003px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><h2 class="step" style="background: transparent; border: 0px; font-size: 16px; line-height: 22px; margin: 20px 0px -5px; outline: 0px; padding: 0px 0px 5px; position: relative; text-shadow: rgba(100, 100, 100, 0.34902) 0px 1px 2px; vertical-align: baseline; word-wrap: break-word;">
Step 5: Place the Parameters into Your THC Hydra Command</h2>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
Now, that we have the parameters, we can place them into the THC-Hydra command. The syntax looks like this:</div>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
<em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">kali > hydra -L <username list> -p <password list> <IP Address> <form parameters><failed login message></strong></em></div>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
So, based on the information we have gathered from Burp Suite, our command should look something like this:</div>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
<em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">kali >hydra -L <wordlist> -P<password list><br />192.168.1.101 http-post-form "/dvwa/login.php:username=^USER^&password=^PASS^&Login=Login:Login failed"</strong></em></div>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
A few things to note. First, you use the upper case "L" if you are using a username list and a lower case "l" if you are trying to crack one username that you supply there. In this case, I will be using the lower case "l " as I will only be trying to crack the "admin" password.</div>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
After the address of the login form (<em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">/dvwa/login.php</em>), the next field is the name of the field that takes the username. In our case, it is "username," but on some forms it might be something different, such as "login."</div>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
Now, let's put together a command that will crack this web form login.</div>
</section><section style="background: rgb(248, 248, 248); border: 0px; font-family: 'Open Sans', Helvetica, Arial, sans-serif; font-size: 13px; line-height: 16.003px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><h2 class="step" style="background: transparent; border: 0px; font-size: 16px; line-height: 22px; margin: 20px 0px -5px; outline: 0px; padding: 0px 0px 5px; position: relative; text-shadow: rgba(100, 100, 100, 0.34902) 0px 1px 2px; vertical-align: baseline; word-wrap: break-word;">
Step 6: Choose a Wordlist</h2>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
Now, we need to chose a wordlist. As with any dictionary attack, the wordlist is key. You can use a custom one made with <a href="http://null-byte.wonderhowto.com/how-to/hack-like-pro-crack-passwords-part-4-creating-custom-wordlist-with-crunch-0156817/" style="background: transparent; color: #0c5296; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;">Crunch</a> of <a href="http://null-byte.wonderhowto.com/how-to/hack-like-pro-crack-passwords-part-5-creating-custom-wordlist-with-cewl-0158855/" style="background: transparent; color: #0c5296; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;">CeWL</a>, but Kali has numerous wordlists built right in. To see them all, simply type:</div>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
<em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">kali > locate wordlist</strong></em></div>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
In addition, there are numerous online sites with wordlists that can be up to 100 GB! Choose wisely, my hacker novitiates. In this case, I will be using a built-in wordlist with less than 1,000 words at:</div>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
<em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">/usr/share/dirb/wordlists/short.txt</strong></em></div>
</section><section style="background: rgb(248, 248, 248); border: 0px; font-family: 'Open Sans', Helvetica, Arial, sans-serif; font-size: 13px; line-height: 16.003px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><h2 class="step" style="background: transparent; border: 0px; font-size: 16px; line-height: 22px; margin: 20px 0px -5px; outline: 0px; padding: 0px 0px 5px; position: relative; text-shadow: rgba(100, 100, 100, 0.34902) 0px 1px 2px; vertical-align: baseline; word-wrap: break-word;">
Step 7: Build the Command</h2>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
Now, let's build our command with all of these elements, as seen below.</div>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
<em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">kali > hydra -l admin -P /usr/share/dirb/wordlists/small.txt 192.168.1.101 http-post-form "/dvwa/login.php:username=^USER^&password=^PASS^&Login=Login:Login failed" -V</strong></em></div>
<figure class="whtGallery" id="6399416docPartGal880055" role="group" style="background: transparent; border: 0px; margin: 15px 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><div class="gallery-layout" style="background: transparent; border: 0px; height: 89px; margin: 0px; outline: 0px; overflow: visible; padding: 10px 0px; position: relative; vertical-align: baseline;">
<div class="gallery-layout-container" style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; text-align: center; vertical-align: baseline;">
<figure class="gal-row gal-row-f gal-wa img-shadow" data-index="0" style="background: url(http://img.wonderhowto.com/images/bge3.gif) rgb(227, 227, 227); border: 0px; box-shadow: rgba(0, 0, 0, 0.34902) 0px 0px 5px inset, rgba(100, 100, 100, 0.65098) 0px 1px 4px; height: 89px; margin: 0px auto; outline: 0px; overflow: hidden; padding: 0px; position: relative; vertical-align: baseline; width: 532px;"><a href="http://img.wonderhowto.com/img/original/50/71/63561584187175/0/635615841871755071.jpg" rel="nofollow" style="background: transparent; color: black; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank"><img alt="" src="http://img.wonderhowto.com/img/50/71/63561584187175/0/hack-like-pro-crack-online-web-form-passwords-with-thc-hydra-burp-suite.w654.jpg" style="background: transparent; border: 0px; display: block; height: 89px; margin: auto auto auto 0px; max-width: 532px; outline: 0px; padding: 0px; vertical-align: baseline; width: auto;" /></a></figure></div>
</div>
</figure><ul style="background: transparent; border: 0px; list-style-image: none; list-style-position: outside; margin: 10px 0px 15px 30px; outline: 0px; padding: 0px; vertical-align: baseline;">
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">-l</strong> indicates a single username (use <strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">-L</strong> for a username list)</li>
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">-P</strong> indicates use the following password list</li>
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">http-post-form</strong> indicates the type of form</li>
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">/dvwa/login-php</strong> is the login page URL</li>
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">username</strong> is the form field where the username is entered</li>
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">^USER^</strong> tells Hydra to use the username or list in the field</li>
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">password</strong> is the form field where the password is entered (it may be passwd, pass, etc.)</li>
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">^PASS^</strong> tells Hydra to use the password list supplied</li>
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Login</strong> indicates to Hydra the login failed message</li>
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Login failed</strong> is the login failure message that the form returned</li>
<li style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin: 5px 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">-V</strong> is for verbose output showing every attempt</li>
</ul>
</section><section style="background: rgb(248, 248, 248); border: 0px; font-family: 'Open Sans', Helvetica, Arial, sans-serif; font-size: 13px; line-height: 16.003px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><h2 class="step" style="background: transparent; border: 0px; font-size: 16px; line-height: 22px; margin: 20px 0px -5px; outline: 0px; padding: 0px 0px 5px; position: relative; text-shadow: rgba(100, 100, 100, 0.34902) 0px 1px 2px; vertical-align: baseline; word-wrap: break-word;">
Step 8: Let Her Fly!</h2>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
Now, let her fly! Since we used the <strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">-V</em></strong> switch, THC-Hydra will show us every attempt.</div>
<figure class="whtGallery" id="43721451docPartGal880057" role="group" style="background: transparent; border: 0px; margin: 15px 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><div class="gallery-layout" style="background: transparent; border: 0px; height: 317px; margin: 0px; outline: 0px; overflow: visible; padding: 10px 0px; position: relative; vertical-align: baseline;">
<div class="gallery-layout-container" style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; text-align: center; vertical-align: baseline;">
<figure class="gal-row gal-row-f gal-wa img-shadow" data-index="0" style="background: url(http://img.wonderhowto.com/images/bge3.gif) rgb(227, 227, 227); border: 0px; box-shadow: rgba(0, 0, 0, 0.34902) 0px 0px 5px inset, rgba(100, 100, 100, 0.65098) 0px 1px 4px; height: 317px; margin: 0px auto; outline: 0px; overflow: hidden; padding: 0px; position: relative; vertical-align: baseline; width: 532px;"><a href="http://img.wonderhowto.com/img/original/86/89/63561584198909/0/635615841989098689.jpg" rel="nofollow" style="background: transparent; color: black; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank"><img alt="" src="http://img.wonderhowto.com/img/86/89/63561584198909/0/hack-like-pro-crack-online-web-form-passwords-with-thc-hydra-burp-suite.w654.jpg" style="background: transparent; border: 0px; display: block; height: 317px; margin: auto auto auto 0px; max-width: 532px; outline: 0px; padding: 0px; vertical-align: baseline; width: auto;" /></a></figure></div>
</div>
</figure><div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
After a few minutes, Hydra returns with the password for our web application. Success!</div>
<figure class="whtGallery" id="17019152docPartGal880059" role="group" style="background: transparent; border: 0px; margin: 15px 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><div class="gallery-layout" style="background: transparent; border: 0px; height: 56px; margin: 0px; outline: 0px; overflow: visible; padding: 10px 0px; position: relative; vertical-align: baseline;">
<div class="gallery-layout-container" style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; text-align: center; vertical-align: baseline;">
<figure class="gal-row gal-row-f gal-wa img-shadow" data-index="0" style="background: url(http://img.wonderhowto.com/images/bge3.gif) rgb(227, 227, 227); border: 0px; box-shadow: rgba(0, 0, 0, 0.34902) 0px 0px 5px inset, rgba(100, 100, 100, 0.65098) 0px 1px 4px; height: 56px; margin: 0px auto; outline: 0px; overflow: hidden; padding: 0px; position: relative; vertical-align: baseline; width: 532px;"><a href="http://img.wonderhowto.com/img/original/28/14/63561584210316/0/635615842103162814.jpg" rel="nofollow" style="background: transparent; color: black; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank"><img alt="" src="http://img.wonderhowto.com/img/28/14/63561584210316/0/hack-like-pro-crack-online-web-form-passwords-with-thc-hydra-burp-suite.w654.jpg" style="background: transparent; border: 0px; display: block; height: 56px; margin: auto auto auto 0px; max-width: 532px; outline: 0px; padding: 0px; vertical-align: baseline; width: auto;" /></a></figure></div>
</div>
</figure></section><section style="background: rgb(248, 248, 248); border: 0px; font-family: 'Open Sans', Helvetica, Arial, sans-serif; font-size: 13px; line-height: 16.003px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><h2 class="sectionHeadline" style="background: transparent; border: 0px; font-size: 16px; line-height: 22px; margin: 20px 0px -5px; outline: 0px; padding: 0px 0px 5px; position: relative; text-shadow: rgba(100, 100, 100, 0.34902) 0px 1px 2px; vertical-align: baseline; word-wrap: break-word;">
Final Thoughts</h2>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
Although THC-Hydra is an effective and excellent tool for online <a href="http://null-byte.wonderhowto.com/how-to/password-cracking/" style="background: transparent; color: #0c5296; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;">password cracking</a>, when using it in web forms, it takes a bit of practice. The key to successfully using it in web forms is determining how the form responds differently to a failed login versus a successful login. In the example above, we identified the failed login message, but we could have identified the successful message and used that instead. To use the successful message, we would replace the failed login message with "S=successful message" such as this:</div>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
<em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">kali > hydra -l admin -P /usr/share/dirb/wordlists/small.txt 192.168.1.101 http-post-form "/dvwa/login.php:username=^USER^&password=^PASS^&S=success message" -V</strong></em></div>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
Also, some web servers will notice many rapid failed attempts at logging in and lock you out. In this case, you will want to use the wait function in THC-Hydra. This will add a wait between attempts so as not to trigger the lockout. You can use this functionality with the <strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">-w</em></strong> switch, so we revise our command to wait 10 seconds between attempts by writing it:</div>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
<em style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><strong style="background: transparent; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">kali > hydra -l admin -P /usr/share/dirb/wordlists/small.txt 192.168.1.101 http-post-form "/dvwa/login.php:username=^USER^&password=^PASS^&Login=Login:Login failed" -w 10 -V</strong></em></div>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
I recommend that you practice the use of THC-Hydra on forms where you know the username and password before using it out "in the wild."</div>
<div style="background: transparent; border: 0px; color: #484440; font-size: 15px; line-height: 22px; margin-bottom: 15px; margin-top: 15px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
Keep coming back, my hacker novitiates, as we continue to expand your repertoire of hacker techniques and arts!</div>
</section><section style="background: rgb(248, 248, 248); border: 0px; font-family: 'Open Sans', Helvetica, Arial, sans-serif; font-size: 13px; line-height: 16.003px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><small class="image-credits" style="background: transparent; border: 0px; color: #aaaaaa; display: block; font-size: 11px; font-style: italic; line-height: 15px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Cover image via <a href="http://www.shutterstock.com/pic-121736164/stock-vector-vector-login-background.html" rel="nofollow" style="background: transparent; color: #999999; margin: 0px; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">Shutterstock</a></small><small class="image-credits" style="background: transparent; border: 0px; color: #aaaaaa; display: block; font-size: 11px; font-style: italic; line-height: 15px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Source : http://null-byte.wonderhowto.com/</small></section>

Hack Like a Pro: How to Crack Online Web Form Passwords with THC-Hydra & Burp Suite

Welcome back, my hacker novitiates! HY I had introduced you to two essential tools for cracking online passwords—Tamper Data and THC-Hydr...

Hack Like a Pro: How to Crack Online Web Form Passwords with THC-Hydra & Burp Suite

BDxoul 0 learn

Hack Like a Pro: How to Crack Online Web Form Passwords with THC-Hydra & Burp Suite

Welcome back, my hacker novitiates! HY I had introduced you to two essential tools for cracking online passwords—Tamper Data and THC-Hydr...

Socialize

Breaking News

Statics

Business

videos

Recent Posts

Hack Like a Pro: How to Crack Online Web Form Passwords with THC-Hydra & Burp Suite

Hack Like a Pro: How to Crack Online Web Form Passwords with THC-Hydra & Burp Suite

Hack Like a Pro: How to Crack Online Web Form Passwords with THC-Hydra & Burp Suite

Hack Like a Pro: How to Crack Online Web Form Passwords with THC-Hydra & Burp Suite

Hack Like a Pro: How to Crack Online Web Form Passwords with THC-Hydra & Burp Suite

Hack Like a Pro: How to Crack Online Web Form Passwords with THC-Hydra & Burp Suite

Techonlogy

Gallery