Question

我正试图抓住九头蛇。

当我这样做以测试我的ftp网站时，它可以工作。我正在使用正确的用户名和密码（例如username1和password1）访问我自己的ftp站点（例如www.mysite.com）：

./hydra -l username1 -p password1 -vV -f www.mysite.com ftp
Hydra v7.4.1 (c)2012 by van Hauser/THC & David Maciejak - for legal purposes only

Hydra (http://www.thc.org/thc-hydra) starting at 2012-12-29 21:06:20
[VERBOSE] More tasks defined than login/pass pairs exist. Tasks reduced to 1.
[DATA] 1 task, 1 server, 1 login try (l:1/p:1), ~1 try per task
[DATA] attacking service ftp on port 21
[VERBOSE] Resolving addresses ... done
[ATTEMPT] target www.mysite.com - login "username1" - pass "password1" - 1 of 1 [child 0]
[21][ftp] host: 200.200.240.240   login: username1   password: password1
[STATUS] attack finished for www.mysite.com (valid pair found)
1 of 1 target successfully completed, 1 valid password found
Hydra (http://www.thc.org/thc-hydra) finished at 2012-12-29 21:06:21

但是，当我这样做以使用正确的用户名和密码（http://browserspy.dk/password-ok.php和test）测试公共基本身份验证测试页（test）时，hydra会停止解决地址......完成'消息。

./hydra -l test -p test -vV -f browserspy.dk http-get /password-ok.php
Hydra v7.4.1 (c)2012 by van Hauser/THC & David Maciejak - for legal purposes only

Hydra (http://www.thc.org/thc-hydra) starting at 2012-12-29 21:02:58
[VERBOSE] More tasks defined than login/pass pairs exist. Tasks reduced to 1.
[DATA] 1 task, 1 server, 1 login try (l:1/p:1), ~1 try per task
[DATA] attacking service http-get on port 80
[VERBOSE] Resolving addresses ... done

水弹过程似乎在这里死了，我回到了命令提示符。

我做错了什么？

Answer 1

你没有做错任何事，它是一个影响模式http-get，http-head和irc的九头蛇的错误。降级到v7.3或等待v7.5，这将解决这个问题。

为什么这个简单的Hydra命令不起作用？

1 个答案: