On 24 May 2012 13:36, Tony Turner <[email protected]> wrote: > Have you tried http://www.foofus.net/~jmk/tools/FPbrute.pl yet? Or is there > a reason you wanted to use Hydra?
I've tried that but it seems to expect the login request for a simple GET. I'm testing a FrontPage install which allows me to read but then fails on write. Checking the traffic when I click save it sends an OPTIONS request which gets a reply of 401 which triggers FP to then start the handshake. Robin > ________________________________ > From: Robin Wood <[email protected]> > To: _ <[email protected]> > Cc: "[email protected]" <[email protected]>; PaulDotCom > Mailing List <[email protected]> > Sent: Thursday, May 24, 2012 8:17 AM > Subject: Re: [Pauldotcom] hydra and HTTP NTLM > > On 24 May 2012 13:06, _ <[email protected]> wrote: >> http ntlm is IIS based windows auth. > > Yes but I still don't know how to attack it. > > Robin > >> On May 23, 2012, at 6:14 AM, Robin Wood <[email protected]> wrote: >> >>> Anyone know how to use the new HTTP NTLM feature in Hydra? I'm trying >>> to brute force a MS Front Page login which only asks for >>> authentication when the OPTIONS method is used as far as I can tell. >>> >>> Robin >>> >>> >>> >>> This list is sponsored by Cenzic >>> -------------------------------------- >>> Let Us Hack You. Before Hackers Do! >>> It's Finally Here - The Cenzic Website HealthCheck. FREE. >>> Request Yours Now! >>> http://www.cenzic.com/2009HClaunch_Securityfocus >>> -------------------------------------- >>> > _______________________________________________ > Pauldotcom mailing list > [email protected] > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom > Main Web Site: http://pauldotcom.com > > > > _______________________________________________ > Pauldotcom mailing list > [email protected] > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom > Main Web Site: http://pauldotcom.com _______________________________________________ Pauldotcom mailing list [email protected] http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
