Hello everyone,
I need help with something I want to do, I want to bruteforce a login in a website but that website uses only link as a login for example
Code websiteblabla.lllllll/get.php?username=xxxxxx&password=xxxxxx&type=m3u
The major problem is if the login is correct it will download me something but if it fails it will take me to a "HTTP ERROR 401".
What can I do? Any suggestions? I know that the login and password are both 6 digits. Please help I am lost.
Check this out, it's a script that can do that for you https://www.yeahhub.com/parameth-tool-br...arameters/
going crazy trying to install that thing, a lot of errors regarding a python levenshtein
Try installing python directly on Windows instead installing of Kali Linux (you can install Kali as a virtual machine for this but it's overkill) and go directly to this page https://github.com/maK-/parameth and download the script and necessary folder which you can modify with your word list.
I guess that you are trying to gain access to IPTV stream. I was able to craft a Google dork for the targeted system, example:
Code inurl:get.php?username= intitle:XUI.one
in case someone else can help you out in suggesting some other solution.
Aug 31, 2021 03:15 PM
(This post was last modified: Aug 31, 2021 04:29 PM by katiedale31.)
Yeah that was the idea they gave me a test account but I was trying to gain access to all the accounts and exploit them since the service is dogshit but this url thing is annoying me I will give a try to the thing that you said earlier but yeah I thought it was a more easier way to do it.
I am done with parameth I installed kali linux and since parameth only works with python 2 I tried installing it and removing python 3 it broke my kali linux I am done with this parameth thing
Idk about simpler tool but since this is IPTV service you are testing, you may want to check this one https://github.com/Pirate-Crew/IPTV and see if it works.
A tool called Hydra can brute force login pages, is pre installed in Kali.
Sep 2, 2021 08:25 AM
(This post was last modified: Sep 2, 2021 10:01 AM by katiedale31.)
(Sep 2, 2021 06:49 AM)bl4ckc0d3 Wrote: A tool called Hydra can brute force login pages, is pre installed in Kali.
I know what hydra is but since it doesn't give me a "incorrect form" for example "Incorrect password." I can't teach hydra that HTTP Error 401 is a incorrect attempt.
(Sep 1, 2021 03:08 AM)pubgmobilecheat Wrote: Idk about simpler tool but since this is IPTV service you are testing, you may want to check this one https://github.com/Pirate-Crew/IPTV and see if it works.
deprecated, a bunch of errors
(Sep 1, 2021 03:19 AM)IDK Wrote: Use burp
https://portswigger.net/support/using-bu...login-page
I don't think I can use burp for this idk I maybe give it a try
There are addons for Burp that might help you customize it.
DO NOT DEAL WITH THIS MEMBER
(Sep 2, 2021 08:25 AM)katiedale31 Wrote: I know what hydra is but since it doesn't give me a "incorrect form" for example "Incorrect password." I can't teach hydra that HTTP Error 401 is a incorrect attempt.
deprecated, a bunch of errors
I don't think I can use burp for this idk I maybe give it a try
send me your discord i will create a tool fast specifically for that
Sep 3, 2021 03:46 PM
(This post was last modified: Sep 3, 2021 03:50 PM by Beladonis.)
(Sep 3, 2021 03:32 PM)0Tolerance Wrote: send me your discord i will create a tool fast specifically for that
Looking at your recent post history full of things related to RATs, crypters and spreading methods, this doesn't seems fishy at all.
DO NOT DEAL WITH THIS MEMBER
(Sep 3, 2021 03:46 PM)Beladonis Wrote: Looking at your recent post history full of things related to RATs, crypters and spreading methods, this doesn't seems fishy at all.
i don't know what you're talking about, it's not like everyone has experience in every topic, there is nothing fishy at all, i will give him the source code
(Aug 30, 2021 03:41 PM)katiedale31 Wrote: Hello everyone,
I need help with something I want to do, I want to bruteforce a login in a website but that website uses only link as a login for example
Code websiteblabla.lllllll/get.php?username=xxxxxx&password=xxxxxx&type=m3u
The major problem is if the login is correct it will download me something but if it fails it will take me to a "HTTP ERROR 401".
What can I do? Any suggestions? I know that the login and password are both 6 digits. Please help I am lost.
dude. I totally get it. Infact, i designed a python tool for this purpose. If the html page reads "401 error" it prints "<pass> failed". If it sees "success" it sends the credentials to my discord. If you have a source to host Python files, you can use it.
If you could send it to me I would appreciate it very much
|
