Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

[TUTORIAL] How to brute force/hack accounts with THC-HYDRA (Works on Linux)

Hello buddy,

I tried to PM but since I'm new here, I couldn't (need 25 messages).
I need some help, I'm trying to bruteforce League of Legends account.
Using your tuto I use this command:
hydra URL https-form-post "/login-queue/rest/queues/lol/authenticate:user=^USER^&pass=^PASS^:invalid_credentials","status":"FAILED." -L user.txt -P dictionnaire.txt -t 10
But i got a error saying that I could not resolve the address I typed:
Could you help me a bit please? That would be great ;)
(I can't give you the URL since I need 50 post to post them haha)
Sorry if I made some mistakes, I learn english

EDIT: Ok I resolve this issue by searching the adress IP of the URL, I did a nslookup on the adress. Now it seem to try to bruteforce but I did a test with my account, so it was the good login name and password and nothing happened... So complicated haha, would appreciate some help plz :)
Thanks :)
I'm new to Hydra and I finally got it to run. I tried with a list of passwords I know are wrong but Hydra returned the results with all 10 of the passwords as valid. What am I doing wrong?
I get the error "You have made too many login attempts. Please wait a few minutes before trying again."
How to I set it up to automatically rotate proxies every x attempts
Quote:Method(Type this in correct order): http-form-post

I've seen in other tutorials that say that the correct order is http-get-form. Which one should I use?
(Feb 28, 2015 02:58 AM)makis23 Wrote:  I've seen in other tutorials that say that the correct order is http-get-form. Which one should I use?

Http-get-form doesn't do the right form method.
[Image: Q66VxMc.png]
(Feb 28, 2015 06:06 AM)High On Quack Wrote:  Http-get-form doesn't do the right form method.

ok, thanks for the reply.
Another thing I have seen in other tutorial is that after the variables ^USER^&^PASS^ they also add a variable for the submit button. Other tutorials don't have that. Is it necessary?
Would this actually work with LoL acounts as well?
Good guide, not much usefull since it's not written for http
ok i am a noob no question in that but as hard as i try i cannot seem to get hydra to do what i want or write a path it excepts any help... someone please pm me if you have time
Hi well I've been learning to use all by myself thc hydra for the past few days and I got this error "File for passwords not found: password.txt" uhm I wanna know if what am i doing wrong?
(Jul 3, 2015 12:59 AM)minaiah07 Wrote:  Hi well I've been learning to use all by myself thc hydra for the past few days and I got this error "File for passwords not found: password.txt" uhm I wanna know if what am i doing wrong?

Make sure you have created a password.txt file in the directory you are running the hydra command.

(Mar 1, 2015 09:08 AM)strongholdi Wrote:  Would this actually work with LoL acounts as well?

Riot has a captcha system set-up so idk.
[Image: Q66VxMc.png]
(Jul 3, 2015 03:11 PM)High On Quack Wrote:  Make sure you have created a password.txt file in the directory you are running the hydra command.


Riot has a captcha system set-up so idk.
thank you kind sir, i already resolved that problem :) but can you help me with these; I've been getting an error like this when I tried to hack my old yahoo account. "[ERROR] SMTP LOGIN AUTH, either this auth is disabled or server is not using auth: 530 5.7.0 Must issue a STARTTLS command first" when I entered this
Code
hydra -l [email protected] -P C:/Users/mina/Desktop/password.txt -e ns -V -s 587 smtp.mail.yahoo.com smtp
im going to give this a try does it brute force ssh?
this guide definitely will help me out ! thank you for this share //
I have been trying to use a bruteforce attack to get my league account back that was recently hacked. I know the site has a captcha system but I also know that people still bruteforce league so there has to be a way. Would going through a proxy help? Or is there any way to get enough information to brute force the actual game client and not the website?


Possibly Related Threads...
Thread / Author Replies Views Last Post
[The Brotherhood] by MastercarderJul 24, 2026 05:11 PM 18 353 Jul 24, 2026 05:11 PM
Last Post: нцптёятяаcё
[Legends] by JoseMarNov 23, 2025 01:47 AM 11 827 Nov 23, 2025 01:47 AM
Last Post: zeealive
by ๖ۣۜTigerNet™Sep 15, 2022 09:34 PM 14 2,166 Sep 15, 2022 09:34 PM
Last Post: sxmxo