Bruteforce web login with Hydra?

Hello everyone!

So basically I have a web login page that requires username and password. Everytime you click the login button, the username and password in the form get combined like ‘username:password’, encoded in base64 and sent over a POST request in the Authorization header.

So for example if I try to login with username ‘foo’ and password ‘bar’, the request will have the authorization header set to ‘Zm9vOmJhcg==’ (decoded -> ‘foo:bar’).

I don’t know how to use hydra (if it’s possible) to bruteforce this, since everytime I used it, it was with http-post-form.

Could anyone give me an hint please? Thank you!

submitted by /u/pizzthepizz
[link] [comments]

May 21, 2023
Read More >>