• caglararli@hotmail.com
  • 05386281520

How to correctly compose a command for brute force http-post-forms?

Çağlar Arlı      -    7 Views

How to correctly compose a command for brute force http-post-forms?

I encountered a strange error when using Hydra to brute force an http-post-form. Please tell me how to write a request correctly to avoid mistakes?

hydra -L userslist -p passlist "url" http-post-form '/login:{"loginType":"BASIC","data":{"username":"^USER^","password":"^PASS^"}}:302' -t 64 -I

Hydra v9.5 (c) 2023 by van Hauser/THC & David Maciejak - Please do not use in military or secret service organizations, or for illegal purposes (this is non-binding, these *** ignore laws and ethics anyway).

Hydra (https://github.com/vanhauser-thc/thc-hydra) starting at 2024-04-14 04:49:22
[ERROR] the variables argument needs at least the strings ^USER^, ^PASS^, ^USER64^ or ^PASS64^: {"loginType"