• caglararli@hotmail.com
  • 05386281520

Hydra 0 valid passwords found despite correct credentials

Çağlar Arlı      -    11 Views

Hydra 0 valid passwords found despite correct credentials

I'm trying to perform a brute-force attack using Hydra on http://testphp.vulnweb.com/login.php. The login credentials are "test" and "test" for both the login ID and password. Despite using the correct credentials it's saying 0 passwords found.

Hydra Output

The command format:

hydra -l test -p test 44.228.249.3 http-post-form "/login.php:uname=^USER^&pass=^PASS^:F=<form name="loginform"" -V -I

I've omitted the port option since it's the default port 80 and the IP address I got using Nmap

Nmap Output

The login credential parameters I got from using burpsuite

Burpsuite Output