HTB Academy - Service Authentication Brute Forcing

Tutorials Other
#1

Hello, I am just looking for a bit of clarification on this section. Are we supposed to make our username / password for the box using Bill Gates like in the example shown above the question? Or are we using common usernames/password lists for hydra? The question isn’t so clear on this.

Thanks!

–FIGURED IT OUT

#2

Type your comment> @0xc0pper said:

Hello, I am just looking for a bit of clarification on this section. Are we supposed to make our username / password for the box using Bill Gates like in the example shown above the question? Or are we using common usernames/password lists for hydra? The question isn’t so clear on this.

Thanks!

–FIGURED IT OUT

Hello, could you give a little help? Ive used /opt/useful/SecLists/Passwords/Default-Credentials/ssh-betterdefaultpasslist.txt for passwords of “b.gates” and rockyou-10 also but got nothing

#3

.

#4

I’m confused too. When you start reading the module it seems there’s no other information other than an IP and a Port number…

#5

Yep, I have the same question too. Not sure if we have to use same dictionary generated in previous sections “William.txt” or generate ours with different words. Not clear. Nowhere to enumerate.

#6

I recall that you should use the william.txt as wordlist

#7

Hi,
On friday I was working on this assesment. It was completely unsuccesful. The issue was a definition problem. HTB should explain better their assesments. When they say employee I thought it was an employee from the previous lessons. But they actually talk about the previous assesment. So, the assesments are actually conencted. The same situation that old starting point (which also was unexplained). So, once I find out this (thaks to a tip) I solve the assesment in 5 minutes. So, williams.txt is a wrong choice, I guess :slight_smile:

#8

I’ve also been stuck on “LOGIN BRUTE FORCING - Skills Assessment - Website”… which user or password list to take or generate. Do you have a tip?

#9

u did it? im stuck :confused:

#10

i did it

#11

hei, could someone here please give me some directions? when I ssh’d using b.gates credentials, I did a cat of the /etc/passwd and there is also a m.gates user. so I have generated also a cupp file for her and used sed to fit the policy… but still no joy… am I at least on the right path? since this is learning, it would be helpful to have some guidelines on how long should the task take…

#12

Did you find out? I am also stuck there…

#13

For clarification you will need the information generated in the section before this “Personalized Wordlists”

#14

Tried making a word list with Firstname Bill and surname Gates and even his birthday and partner Melinda but does not work… Which wordlist to use???

#15

HINTS:

  1. Just like in the course: Create Personalized Password Wordlist for the given person: Bill Gates, use cupp
  2. Just like in the course: Create Personalized Username Wordlist for the given person: Bill Gates, use username-anarchy