Unsure if I have understood Hydra syntax correctly?
So, when I see the Hydra help file, this is what it says:
Syntax: hydra [[[-l LOGIN|-L FILE] [-p PASS|-P FILE]] | [-C FILE]] [-e nsr] [-o FILE] [-t TASKS] [-M FILE [-T TASKS]] [-w TIME] [-W TIME] [-f] [-s PORT] [-x MIN:MAX:CHARSET] [-SuvVd46] [service://server[:PORT][/OPT]]
The service I am interested in is http-get-form. When I look at the help for this module, I need to use the module like this:
<url>:<form parameters>:<condition string>[:<optional>[:<optional>]
From the examples that the help file provides, I need to use it like so -
"/login.php:user=^USER^&pass=^PASS^:incorrect"
I construct a query like so -
hydra -L usernames.txt -P passwords.txt http-get-form://site.appspot.com "/lab/webapp/1:email=^USER^&password=^PASS^:Failed"
Hydra fails with the error Unknown service: lab/webapp/1:email=^USER^&password=^PASS^:Failed
Looking at this post here, it may be that Hydra no longer support that syntax form. I know that there is an alternate syntax that I could use which works. However, I would like to know what I am doing wrong with the syntax that I am using.
brute-force
edited Mar 17 '17 at 13:14
Community♦
1
asked Jul 22 '15 at 3:36
user1720897user1720897
16229
migrated from security.stackexchange.com Jul 23 '15 at 13:45
This question came from our site for information security professionals.
add a comment |
So, when I see the Hydra help file, this is what it says:
Syntax: hydra [[[-l LOGIN|-L FILE] [-p PASS|-P FILE]] | [-C FILE]] [-e nsr] [-o FILE] [-t TASKS] [-M FILE [-T TASKS]] [-w TIME] [-W TIME] [-f] [-s PORT] [-x MIN:MAX:CHARSET] [-SuvVd46] [service://server[:PORT][/OPT]]
The service I am interested in is http-get-form. When I look at the help for this module, I need to use the module like this:
<url>:<form parameters>:<condition string>[:<optional>[:<optional>]
From the examples that the help file provides, I need to use it like so -
"/login.php:user=^USER^&pass=^PASS^:incorrect"
I construct a query like so -
hydra -L usernames.txt -P passwords.txt http-get-form://site.appspot.com "/lab/webapp/1:email=^USER^&password=^PASS^:Failed"
Hydra fails with the error Unknown service: lab/webapp/1:email=^USER^&password=^PASS^:Failed
Looking at this post here, it may be that Hydra no longer support that syntax form. I know that there is an alternate syntax that I could use which works. However, I would like to know what I am doing wrong with the syntax that I am using.
brute-force
edited Mar 17 '17 at 13:14
Community♦
1
asked Jul 22 '15 at 3:36
user1720897user1720897
16229
migrated from security.stackexchange.com Jul 23 '15 at 13:45
This question came from our site for information security professionals.
I haven't really used Hydra, but why do you put the path in quotes? Maybe try: http-get-form://site.appspot.com/lab/webapp/1:email=^USER^&password=^PASS^:Failed Or try & write site.... instead.
– Gasur
Jul 22 '15 at 8:58
@user1622951 It returns[ERROR] Wrong syntax, requires three arguments separated by a colon which may not be null: /lab/webapp/1
– user1720897
Jul 22 '15 at 9:24
I'm confused. You have a syntax that works and an indication that hydra changed their syntax, but you still want to know why the old syntax doesn't work?
– schroeder
Jul 22 '15 at 15:25
@schroeder The confusion stems from the fact that the 'old syntax may not work' is something I read from a source I cant explicitly connect with Hydra. The Hydra help file shows this as the only syntax. So, I am not too sure if this syntax is outdated.
– user1720897
Jul 22 '15 at 15:53
add a comment |
So, when I see the Hydra help file, this is what it says:
Syntax: hydra [[[-l LOGIN|-L FILE] [-p PASS|-P FILE]] | [-C FILE]] [-e nsr] [-o FILE] [-t TASKS] [-M FILE [-T TASKS]] [-w TIME] [-W TIME] [-f] [-s PORT] [-x MIN:MAX:CHARSET] [-SuvVd46] [service://server[:PORT][/OPT]]
The service I am interested in is http-get-form. When I look at the help for this module, I need to use the module like this:
<url>:<form parameters>:<condition string>[:<optional>[:<optional>]
From the examples that the help file provides, I need to use it like so -
"/login.php:user=^USER^&pass=^PASS^:incorrect"
I construct a query like so -
hydra -L usernames.txt -P passwords.txt http-get-form://site.appspot.com "/lab/webapp/1:email=^USER^&password=^PASS^:Failed"
Hydra fails with the error Unknown service: lab/webapp/1:email=^USER^&password=^PASS^:Failed
Looking at this post here, it may be that Hydra no longer support that syntax form. I know that there is an alternate syntax that I could use which works. However, I would like to know what I am doing wrong with the syntax that I am using.
brute-force
edited Mar 17 '17 at 13:14
Community♦
1
asked Jul 22 '15 at 3:36
user1720897user1720897
16229
So, when I see the Hydra help file, this is what it says:
Syntax: hydra [[[-l LOGIN|-L FILE] [-p PASS|-P FILE]] | [-C FILE]] [-e nsr] [-o FILE] [-t TASKS] [-M FILE [-T TASKS]] [-w TIME] [-W TIME] [-f] [-s PORT] [-x MIN:MAX:CHARSET] [-SuvVd46] [service://server[:PORT][/OPT]]
The service I am interested in is http-get-form. When I look at the help for this module, I need to use the module like this:
<url>:<form parameters>:<condition string>[:<optional>[:<optional>]
From the examples that the help file provides, I need to use it like so -
"/login.php:user=^USER^&pass=^PASS^:incorrect"
I construct a query like so -
hydra -L usernames.txt -P passwords.txt http-get-form://site.appspot.com "/lab/webapp/1:email=^USER^&password=^PASS^:Failed"
Hydra fails with the error Unknown service: lab/webapp/1:email=^USER^&password=^PASS^:Failed
Looking at this post here, it may be that Hydra no longer support that syntax form. I know that there is an alternate syntax that I could use which works. However, I would like to know what I am doing wrong with the syntax that I am using.
brute-force
brute-force
edited Mar 17 '17 at 13:14
Community♦
1
asked Jul 22 '15 at 3:36
user1720897user1720897
16229
edited Mar 17 '17 at 13:14
Community♦
1
asked Jul 22 '15 at 3:36
user1720897user1720897
16229
edited Mar 17 '17 at 13:14
Community♦
1
edited Mar 17 '17 at 13:14
Community♦
1
edited Mar 17 '17 at 13:14
Community♦
1
1
asked Jul 22 '15 at 3:36
user1720897user1720897
16229
asked Jul 22 '15 at 3:36
user1720897user1720897
16229
asked Jul 22 '15 at 3:36
user1720897user1720897
16229
16229
migrated from security.stackexchange.com Jul 23 '15 at 13:45
This question came from our site for information security professionals.
migrated from security.stackexchange.com Jul 23 '15 at 13:45
This question came from our site for information security professionals.
I haven't really used Hydra, but why do you put the path in quotes? Maybe try: http-get-form://site.appspot.com/lab/webapp/1:email=^USER^&password=^PASS^:Failed Or try & write site.... instead.
– Gasur
Jul 22 '15 at 8:58
@user1622951 It returns[ERROR] Wrong syntax, requires three arguments separated by a colon which may not be null: /lab/webapp/1
– user1720897
Jul 22 '15 at 9:24
I'm confused. You have a syntax that works and an indication that hydra changed their syntax, but you still want to know why the old syntax doesn't work?
– schroeder
Jul 22 '15 at 15:25
@schroeder The confusion stems from the fact that the 'old syntax may not work' is something I read from a source I cant explicitly connect with Hydra. The Hydra help file shows this as the only syntax. So, I am not too sure if this syntax is outdated.
– user1720897
Jul 22 '15 at 15:53
add a comment |
I haven't really used Hydra, but why do you put the path in quotes? Maybe try: http-get-form://site.appspot.com/lab/webapp/1:email=^USER^&password=^PASS^:Failed Or try & write site.... instead.
– Gasur
Jul 22 '15 at 8:58
@user1622951 It returns[ERROR] Wrong syntax, requires three arguments separated by a colon which may not be null: /lab/webapp/1
– user1720897
Jul 22 '15 at 9:24
I'm confused. You have a syntax that works and an indication that hydra changed their syntax, but you still want to know why the old syntax doesn't work?
– schroeder
Jul 22 '15 at 15:25
@schroeder The confusion stems from the fact that the 'old syntax may not work' is something I read from a source I cant explicitly connect with Hydra. The Hydra help file shows this as the only syntax. So, I am not too sure if this syntax is outdated.
– user1720897
Jul 22 '15 at 15:53
I haven't really used Hydra, but why do you put the path in quotes? Maybe try: http-get-form://site.appspot.com/lab/webapp/1:email=^USER^&password=^PASS^:Failed Or try & write site.... instead.
– Gasur
Jul 22 '15 at 8:58
I haven't really used Hydra, but why do you put the path in quotes? Maybe try: http-get-form://site.appspot.com/lab/webapp/1:email=^USER^&password=^PASS^:Failed Or try & write site.... instead.
– Gasur
Jul 22 '15 at 8:58
@user1622951 It returns
[ERROR] Wrong syntax, requires three arguments separated by a colon which may not be null: /lab/webapp/1– user1720897
Jul 22 '15 at 9:24
@user1622951 It returns
[ERROR] Wrong syntax, requires three arguments separated by a colon which may not be null: /lab/webapp/1– user1720897
Jul 22 '15 at 9:24
I'm confused. You have a syntax that works and an indication that hydra changed their syntax, but you still want to know why the old syntax doesn't work?
– schroeder
Jul 22 '15 at 15:25
I'm confused. You have a syntax that works and an indication that hydra changed their syntax, but you still want to know why the old syntax doesn't work?
– schroeder
Jul 22 '15 at 15:25
@schroeder The confusion stems from the fact that the 'old syntax may not work' is something I read from a source I cant explicitly connect with Hydra. The Hydra help file shows this as the only syntax. So, I am not too sure if this syntax is outdated.
– user1720897
Jul 22 '15 at 15:53
@schroeder The confusion stems from the fact that the 'old syntax may not work' is something I read from a source I cant explicitly connect with Hydra. The Hydra help file shows this as the only syntax. So, I am not too sure if this syntax is outdated.
– user1720897
Jul 22 '15 at 15:53
add a comment |
1 Answer
1
active
oldest
votes
I guess syntax description is correct for http service only :)
Change your command line into this, and will do the trick. I have tested on 8.1 version
hydra -L usernames.txt -P passwords.txt site.appspot.com http-get-form "/lab/webapp/1:email=^USER^&password=^PASS^:Failed"
answered Jan 10 '16 at 0:47
slavaslava
1
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f944303%2funsure-if-i-have-understood-hydra-syntax-correctly%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
I guess syntax description is correct for http service only :)
Change your command line into this, and will do the trick. I have tested on 8.1 version
hydra -L usernames.txt -P passwords.txt site.appspot.com http-get-form "/lab/webapp/1:email=^USER^&password=^PASS^:Failed"
answered Jan 10 '16 at 0:47
slavaslava
1
add a comment |
I guess syntax description is correct for http service only :)
Change your command line into this, and will do the trick. I have tested on 8.1 version
hydra -L usernames.txt -P passwords.txt site.appspot.com http-get-form "/lab/webapp/1:email=^USER^&password=^PASS^:Failed"
answered Jan 10 '16 at 0:47
slavaslava
1
add a comment |
I guess syntax description is correct for http service only :)
Change your command line into this, and will do the trick. I have tested on 8.1 version
hydra -L usernames.txt -P passwords.txt site.appspot.com http-get-form "/lab/webapp/1:email=^USER^&password=^PASS^:Failed"
answered Jan 10 '16 at 0:47
slavaslava
1
I guess syntax description is correct for http service only :)
Change your command line into this, and will do the trick. I have tested on 8.1 version
hydra -L usernames.txt -P passwords.txt site.appspot.com http-get-form "/lab/webapp/1:email=^USER^&password=^PASS^:Failed"
answered Jan 10 '16 at 0:47
slavaslava
1
answered Jan 10 '16 at 0:47
slavaslava
1
answered Jan 10 '16 at 0:47
slavaslava
1
answered Jan 10 '16 at 0:47
slavaslava
1
1
add a comment |
add a comment |
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f944303%2funsure-if-i-have-understood-hydra-syntax-correctly%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
I haven't really used Hydra, but why do you put the path in quotes? Maybe try: http-get-form://site.appspot.com/lab/webapp/1:email=^USER^&password=^PASS^:Failed Or try & write site.... instead.
– Gasur
Jul 22 '15 at 8:58
@user1622951 It returns
[ERROR] Wrong syntax, requires three arguments separated by a colon which may not be null: /lab/webapp/1– user1720897
Jul 22 '15 at 9:24
I'm confused. You have a syntax that works and an indication that hydra changed their syntax, but you still want to know why the old syntax doesn't work?
– schroeder
Jul 22 '15 at 15:25
@schroeder The confusion stems from the fact that the 'old syntax may not work' is something I read from a source I cant explicitly connect with Hydra. The Hydra help file shows this as the only syntax. So, I am not too sure if this syntax is outdated.
– user1720897
Jul 22 '15 at 15:53