Introduction Hail Hydra! Okay, so we’re not talking about the Marvel villains here, but we are talking about a tool that can definitely do some damage. Hydra is a popular tool for launching brute force attacks on login credentials. Hydra has options for attacking logins on a variety of different protocols, but in this instance,…
Introduction In this third part of the Burp Suite series, you will learn how to actually collect proxied traffic with Burp Suite and use it launch and actual brute force attack. It will run somewhat parallel to our guide on Testing WordPress Logins with Hydra. In this case, though, you will use Burp Suite to gather…
When it comes to testing the security of web applications, you’d have a hard time finding a set of tools better than Burp Suite from Portswigger web security. It allows you to intercept and monitor web traffic along with detailed information about the requests and responses to and from a server. This tutorial covers setting…
Introduction There are web forms all over the Internet. Even sites that don’t usually allow regular users to log in probably have an admin area. It’s important when running and deploying a site to make sure that the passwords gating access to sensitive controls and admin panels are as secure as possible. There are different…
Objective Use Fluxion to create a evil twin access point to steal WiFi login credentials, demonstrating the need for user education. Distributions Kali Linux is preferred, but this can be done with any Linux distribution. Requirements A working Linux install with root privileges and two wireless network adapters. Difficulty Easy Conventions Introduction Users are always…
Objective Test the security of your WiFi password by attacking it Distributions This will work with any Linux distribution, but it’s recommended that you use Kali. Requirements A working Linux distribution with a WiFi adapter and root privileges. Difficulty Easy Conventions Introduction Most people have terrible passwords, and WiFi is no exception. Your WiFi password…
Introduction It’s important to remember that Burp Suite is a software suite, and that’s why a whole series was needed to cover even just the basics. Because it is a suite, there are also more tools bundled in that work in conjunction with one another and the proxy that you’re already familiar with. These tools…
Introduction In this third part of the Burp Suite series, you will learn how to actually collect proxied traffic with Burp Suite and use it launch and actual brute force attack. It will run somewhat parallel to our guide on Testing WordPress Logins with Hydra. In this case, though, you will use Burp Suite to gather…
Introduction In this second part of the Burp Suite series you will lean how to use the Burp Suite proxy to collect data from requests from your browser. You will explore how an intercepting proxy works and how to read the request and response data collected by Burp Suite. The third part of the guide…
Introduction Wordlists are a key part of brute force password attacks. For those readers that aren’t familiar, a brute force password attack is an attack in which an attacker uses a script to repeatedly attempt to log into an account until they receive a positive result. Brute force attacks are fairly overt and can cause…