[Mayy]

Hey again, I'm making progress. The website is AnimalJam.com, if you followed my other threads then you'd know my reasoning behind bruteforcing this website.

I believe the failure response message is "not_the_password" but I am not fully sure. Can someone with more experience check the site and verify with me the correct failure response?

[CryptixHacking]

Using a http/https header viewer/modifier should allow you to see the failed login response something like Tamper Data.

Just load up a browser with Tamper Data on it do a failed login and read the response headers sent back.


Been a while sense I done any cracking with ncrack/hydra but I believe that was a easy way to detect a failed login response from the server.

But it would also matter on the type of protocol and service port you are attacking at.


I do not condone or help hacking into sites that I do not have authorization to test on. But I can and will try to help answer the question at least.

[Mayy]

Using a http/https header viewer/modifier should allow you to see the failed login response something like Tamper Data.

Just load up a browser with Tamper Data on it do a failed login and read the response headers sent back.


Been a while sense I done any cracking with ncrack/hydra but I believe that was a easy way to detect a failed login response from the server.

But it would also matter on the type of protocol and service port you are attacking at.


I do not condone or help hacking into sites that I do not have authorization to test on. But I can and will try to help answer the question at least.

Okay thanks but I can't do this bc Tamper Data isn't working.

---

This is the response I get:
{"not_the_password":"The password you entered does not match our records.","message":"The password you entered does not match our records."}

[CryptixHacking]

Then you could also try the burp suit
https://portswigger.net/burp/

But from the looks of it yea you seem to have the failed message there either try
"not_the_password" or "The password you entered does not match our records."

As the failed login message.