+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Brute forcing login in a link (/showthread.php?tid=6170431)
Brute forcing login in a link - katiedale31 - Aug 30, 2021
Hello everyone,
I need help with something I want to do, I want to bruteforce a login in a website but that website uses only link as a login for example
Code
websiteblabla.lllllll/get.php?username=xxxxxx&password=xxxxxx&type=m3uThe major problem is if the login is correct it will download me something but if it fails it will take me to a "HTTP ERROR 401".
What can I do? Any suggestions? I know that the login and password are both 6 digits. Please help I am lost.
RE: Brute forcing login in a link - pubgmobilecheat - Aug 30, 2021
Check this out, it's a script that can do that for you https://www.yeahhub.com/parameth-tool-brute-discover-get-post-parameters/
RE: Brute forcing login in a link - katiedale31 - Aug 30, 2021
going crazy trying to install that thing, a lot of errors regarding a python levenshtein
RE: Brute forcing login in a link - pubgmobilecheat - Aug 31, 2021
Try installing python directly on Windows instead installing of Kali Linux (you can install Kali as a virtual machine for this but it's overkill) and go directly to this page https://github.com/maK-/parameth and download the script and necessary folder which you can modify with your word list.
I guess that you are trying to gain access to IPTV stream. I was able to craft a Google dork for the targeted system, example:
Code
inurl:get.php?username= intitle:XUI.oneRE: Brute forcing login in a link - katiedale31 - Aug 31, 2021
Yeah that was the idea they gave me a test account but I was trying to gain access to all the accounts and exploit them since the service is dogshit but this url thing is annoying me I will give a try to the thing that you said earlier but yeah I thought it was a more easier way to do it.
I am done with parameth I installed kali linux and since parameth only works with python 2 I tried installing it and removing python 3 it broke my kali linux I am done with this parameth thing
RE: Brute forcing login in a link - pubgmobilecheat - Sep 1, 2021
Idk about simpler tool but since this is IPTV service you are testing, you may want to check this one https://github.com/Pirate-Crew/IPTV and see if it works.
RE: Brute forcing login in a link - IDK - Sep 1, 2021
Use burp
https://portswigger.net/support/using-burp-to-brute-force-a-login-page
RE: Brute forcing login in a link - bl4ckc0d3 - Sep 2, 2021
A tool called Hydra can brute force login pages, is pre installed in Kali.
RE: Brute forcing login in a link - katiedale31 - Sep 2, 2021
(Sep 2, 2021 06:49 AM)bl4ckc0d3 Wrote: A tool called Hydra can brute force login pages, is pre installed in Kali.
I know what hydra is but since it doesn't give me a "incorrect form" for example "Incorrect password." I can't teach hydra that HTTP Error 401 is a incorrect attempt.
(Sep 1, 2021 03:08 AM)pubgmobilecheat Wrote: Idk about simpler tool but since this is IPTV service you are testing, you may want to check this one https://github.com/Pirate-Crew/IPTV and see if it works.
deprecated, a bunch of errors
(Sep 1, 2021 03:19 AM)IDK Wrote: Use burp
https://portswigger.net/support/using-burp-to-brute-force-a-login-page
I don't think I can use burp for this idk I maybe give it a try
RE: Brute forcing login in a link - pubgmobilecheat - Sep 3, 2021
There are addons for Burp that might help you customize it.
RE: Brute forcing login in a link - 0Tolerance - Sep 3, 2021
(Sep 2, 2021 08:25 AM)katiedale31 Wrote: I know what hydra is but since it doesn't give me a "incorrect form" for example "Incorrect password." I can't teach hydra that HTTP Error 401 is a incorrect attempt.
deprecated, a bunch of errors
I don't think I can use burp for this idk I maybe give it a try
send me your discord i will create a tool fast specifically for that
RE: Brute forcing login in a link - Beladonis - Sep 3, 2021
(Sep 3, 2021 03:32 PM)0Tolerance Wrote: send me your discord i will create a tool fast specifically for that
Looking at your recent post history full of things related to RATs, crypters and spreading methods, this doesn't seems fishy at all.
RE: Brute forcing login in a link - 0Tolerance - Sep 3, 2021
(Sep 3, 2021 03:46 PM)Beladonis Wrote: Looking at your recent post history full of things related to RATs, crypters and spreading methods, this doesn't seems fishy at all.
i don't know what you're talking about, it's not like everyone has experience in every topic, there is nothing fishy at all, i will give him the source code
RE: Brute forcing login in a link - sugar246 - Sep 10, 2021
(Aug 30, 2021 03:41 PM)katiedale31 Wrote: Hello everyone,
I need help with something I want to do, I want to bruteforce a login in a website but that website uses only link as a login for example
Codewebsiteblabla.lllllll/get.php?username=xxxxxx&password=xxxxxx&type=m3u
The major problem is if the login is correct it will download me something but if it fails it will take me to a "HTTP ERROR 401".
What can I do? Any suggestions? I know that the login and password are both 6 digits. Please help I am lost.
dude. I totally get it. Infact, i designed a python tool for this purpose. If the html page reads "401 error" it prints "<pass> failed". If it sees "success" it sends the credentials to my discord. If you have a source to host Python files, you can use it.
RE: Brute forcing login in a link - katiedale31 - Sep 15, 2021
If you could send it to me I would appreciate it very much