Hack Forums
Sagemcom router / Hydra crack password - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Wifi 5G WPA WEP Bluetooth Wireless Hacking (https://hackforums.net/forumdisplay.php?fid=104)
+---- Thread: Sagemcom router / Hydra crack password (/showthread.php?tid=6065097)



Sagemcom router / Hydra crack password - DaCallar - Apr 9, 2020

Hi Everyone,

I just became a member due to lack of knowledge and for the need to improve my skills furthermore. I have followed some tutorials on Youtube and read alot of articles on the net regarding security and hacking of all kinds. I have started using Aircrack-ng and CommView and learning how it can be used to crack WiFi passwords and how you should think regarding on securing it better. I managed to crack my own WiFi password using CommView and Aircrack-ng.

The next step was for me to figure out how I could crack my Routers password. After some research on teh net and some tutorials on YouTube I found that Hydra could be useful.

The question I need help with answering is why my Hydra attempts always stop after 16 attempts, can someone spot anything I am missing? I have been researching and testing alot of different soultions that I have found on the net but I have not found a correct one yet.

My command in plain text in CMD for Hydra is:
hydra -l admin -P "C:\Users\D\Documents\CommView for WiFi\WORDLISTS\rockyou.txt" -f -V -t 7 -w 2 -m "/postlogin.cgi?sessionKey=145165516:username=^USER^&password=^PASS^&Login=Login:Login Failed" 192.168.0.1 http-post-form

I have also tested this command:
hydra -l admin -P "C:\Users\D\Documents\CommView for WiFi\WORDLISTS\rockyou.txt" -f -v -V -m /postlogin.cgi?sessionKey=145165516 192.168.0.1 http-post

Everytime it stops and does not proceed.

I am using following inventory:
  1. Windows 10 Home x64
  2. THC-HYDRA-windows v9.0
  3. Sagemcom Router 3890V3 CH

Best regards
// Geralt of Rivia


RE: Sagemcom router / Hydra crack password - 2xTheTap115 - Apr 12, 2020

(Apr 9, 2020 10:38 AM)DaCallar Wrote:  Hi Everyone,

I just became a member due to lack of knowledge and for the need to improve my skills furthermore. I have followed some tutorials on Youtube and read alot of articles on the net regarding security and hacking of all kinds. I have started using Aircrack-ng and CommView and learning how it can be used to crack WiFi passwords and how you should think regarding on securing it better. I managed to crack my own WiFi password using CommView and Aircrack-ng.

The next step was for me to figure out how I could crack my Routers password. After some research on teh net and some tutorials on YouTube I found that Hydra could be useful.

The question I need help with answering is why my Hydra attempts always stop after 16 attempts, can someone spot anything I am missing? I have been researching and testing alot of different soultions that I have found on the net but I have not found a correct one yet.

My command in plain text in CMD for Hydra is:
hydra -l admin -P "C:\Users\D\Documents\CommView for WiFi\WORDLISTS\rockyou.txt" -f -V -t 7 -w 2 -m "/postlogin.cgi?sessionKey=145165516:username=^USER^&password=^PASS^&Login=Login:Login Failed" 192.168.0.1 http-post-form

I have also tested this command:
hydra -l admin -P "C:\Users\D\Documents\CommView for WiFi\WORDLISTS\rockyou.txt" -f -v -V -m /postlogin.cgi?sessionKey=145165516 192.168.0.1 http-post

Everytime it stops and does not proceed.

I am using following inventory:
  1. Windows 10 Home x64
  2. THC-HYDRA-windows v9.0
  3. Sagemcom Router 3890V3 CH

Best regards
// Geralt of Rivia

maybe the router is set up so that after a few unsuccessful attempts to login to the administration panel it rejects any retries🙄 I have advice for you. Scan the router with nmap-em (nmap -sTV -p- ROUTER IP ADDRESS) then check if your router is running ssh or telnet and try logging in there using the default login details (admin: admin or something like that look on the internet combinations for your hardware) if you manage to log in to any of these services you will be able to download a hash file from the router's file system. Once you have the password hashes, you will be able to use the online hash cracking service to instantly know the passwords for all user accounts🙂👍


RE: Sagemcom router / Hydra crack password - DaCallar - Apr 15, 2020

(Apr 12, 2020 02:02 AM)2xTheTap115 Wrote:  maybe the router is set up so that after a few unsuccessful attempts to login to the administration panel it rejects any retries🙄 I have advice for you. Scan the router with nmap-em (nmap -sTV -p- ROUTER IP ADDRESS) then check if your router is running ssh or telnet and try logging in there using the default login details (admin: admin or something like that look on the internet combinations for your hardware) if you manage to log in to any of these services you will be able to download a hash file from the router's file system. Once you have the password hashes, you will be able to use the online hash cracking service to instantly know the passwords for all user accounts🙂👍

Hi,

Thanks for the feedback. I will try it out and come back with my result. :)