thc-hydra icon indicating copy to clipboard operation
thc-hydra copied to clipboard

hydra

Results 69 thc-hydra issues
Sort by recently updated
recently updated
newest added

Hi @vanhauser-thc @dmaciejak, Hydra is unable to make HTTPS request when using a proxy connection. The proxy works very **well** for **HTTP** requests but not for **HTTPS**. I have tried...

bug
help wanted

Is this possible? `hydra -P path/to/my/wordlist.txt https:target.com https-post-form "{"variables":{},"query":"mutation {\n changePassword(password: \"Password\", verificationCode: \"^PASS^\", mobileNo: \"number\")\n}\n"}"` i don't need a login flag since i want to brute force only one...

- If SMB password is MUST_CHANGE or EXPIRED, it is still valid, it is possible to change it remotely, so it should be returned as valid. - If the _account_...

Hi, I use Hydra and most of the time xHydra (GUI) because it's easier/faster ! I love it... But sometime I need to switch to command line with Hydra because...

enhancement
help wanted
good first issue

**IMPORTANT** Hi I cloned the last version of Hydra, compiled etc and at the time I exec the binary im getting the next error ![image](https://github.com/vanhauser-thc/thc-hydra/assets/62616592/eac0ecbb-a2c2-4ff9-b9a1-64fa40401f3d) **Desktop (please complete the following...

help wanted
good first issue

The MSSQL module has an undocumented and silent username and password limit of 30 characters. See here: https://github.com/vanhauser-thc/thc-hydra/blob/master/hydra-mssql.c#L68-L71 It just chops the password off without any warning to the user....

help wanted
good first issue

**Describe the bug** Using hydra http-get module with the option A=MD5 (digest) should use Digest Auth only. However if you run hydra, you can find multiple Basic Auth attempts instead...

I was messing around with a friend's webapp (he asked for it) and when I'm running this command ```hydra -l **** -P wl.txt ***********.com https-post-form "/login:pseudo=^USER^&password^PASS^:Mot de passe faux"``` so...

I tried both the wordlist and the single password methods but same error everytime. Here i provided the actual key but still it shows 0 valid password found and in...

Auth is not done via rtsp://admin:[email protected], Only the RTSP path like "/user=^USER^&^PASS^=&stream" works. So normal to view the stream in VLC, I would enter rtsp://192.168.5.150/user=^USER^&^PASS^=&stream. When trying to hydra, I...

help wanted