Hello everybody and welcome back.
And let's continue from where we previously finished which was the burps and good fortune but we want
to do right now is use our own tool we not our own poo but a different tool that is already installed
in clinics which is called Hydra so if you type your Hydra it will give you the different option you
can use for this too.
Now we will do the same attack with the same user list and same password list just in on the same page
in order to show you that this will work much faster than the previous scan which took around 30 seconds
so the syntax can be a little bit hard for this for this tool.
I will show you why it can be a little bit problematic if you do not know what you are doing so I'll
make sure to explain every part of the syntax.
Now before we even type anything you can see the usage or the example right here which is rather simple
than the one that we will use at the end.
So we do not care about it at the moment.
Let's just clear the screen and let's just open our burps.
Now let us go to the proxy and turn our intercept on in order to check out the packet that we will get
once we type here.
Any user name and any password so just type your anything.
And what we are interested in this packet is the path that it took on the website in order to log into
this page.
So what you want to do right here is copy this page right here or this path right here and so just copy
it.
Now the principle behind this attack is the same for any page.
So basically you go onto the any page you have permission to test.
And if you in turn your into set on bank type a bunch of random words you just want to copy the page
itself in order to specify the correct path that you will brute force so once you call it that you want
to go on to your first of all what you want to do is turn the intercept off.
So it gives us from Goldman a wrong password.
And what we want to go right here type here Hydra and then type the IP address of our virtual machine
which is referring to as a host.
Now the next thing that we need to type right here is this HDP minus post mark.
Now what are the main minus four minus post.
What this means is basically that it is a post type request and that we that post type request we are
filling in the form.
So this right here is called form and a request type that we are using to send the form is post request
and it will always be POST request.
You cannot send form with the get request so once you type here a shitty P minus form minus post it
just adhere the
path between these two.
So just add path right here.
And once you add pad you do not want to close it what you want to do is type here two dots.
This is just the syntax.
So once you type here two dots after the path which want to type here is user name and then this upper
arrow sign apparently goes user name equals just imagine this.
Maybe it would be easier.
So two dots user name equals can this upper arrow and type here.
Big user then once again upper arrow then this sign that we just find that this sign right here I'm
not really sure how it is called on English but I that sign and after that type you pass w the equals.
And then once again the upper arrow and then pass and another upper arrow and then once again the same
side.
And then type you submit equals submit and then two dots once again and then wrong user name or password
dot and then close this all so what happened right here is basically first here we specify the host
which is the appearance of our machine.
Then we specify the type of request that we want to set which is we are filling in the form with the
Post's request.
And then we specify the path to the form which is this We copy that from the packet.
Then after that comes the syntax which is separated with two dots.
So two dots username equals.
And now the Hydra syntax knows where to use the name means because it specified it between these two
arrows.
It will use all the usernames from our user to steal lists in order to put it between these two arrows
every time it is a little bit hard syntax.
So you will get used to it at the same time.
The same is with the password which is separated with this sign from the username and password.
In between these two arrows it will specify all of the passwords from our past to the external list.
Now then you separate right here with the same sign as well and we type here.
Submit equals submit and that's a myth.
Is referring to this button right here which is basically submit so the button engaged to a male page
is called submit.
So with that here submit equal submit work just fine find right here.
Why did it say it twice.
Let me just.
OK.
Let me just clear the screen.
Something happened on why that happened but it doesn't matter.
So submit is referring to the button that we have to click in order to send our request.
And with these two dots right here it is searching for the packet that doesn't have this string.
It is the same principle as in the burbs suit just the syntax right.
Here is a little bit harder since in burp suit everything was automated and we could do it easily here
in the syntax.
We need to specify after the button that we click but type of string.
Are we not looking for in the packets so once you do that you just type here minus capital L and for
the list and then just find the path to your using the text file.
For me it is indeed directory and here they appear minus the peak for the passwords not to exceed.
And once you type that you got the entire syntax written so near dark man written.
So right now what you want to do is just type press enter and we can see that it started attacking and
it should finish relatively fast.
And as you can see right here it's already finished.
And it found one valid user name and one valid password which is admin admin.
And if we tried once again right here.
So just type your admin admin.
It will work again.
So this is the syntax that we covered or the command that we covered.
Now the prevention for this attack if you for example want to create your own web page is basically
just block the user from trying to log in.
After five failed attempts for example.
Now this example this method of prevention the book first attack will basically make 90 percent of people
quit after they notice that the website is blocking after a certain number of attempts.
For example I believe the Instagram Twitter Facebook they all do that.
But there are bypasses for that as well which is changing your IP address every time you finish brute
forcing.
For example my passwords.
This more advanced thing and we will do it later on when we attack the social media's with our brute
force.
So that's about it for this lecture in the next one.
Will cover some of the other attacks on our OS political machine.
And until then I hope you have a great day and take a.