Login Brute-forcing Issue

Hello everyone!

I’m new to HTB, and I’m currently facing an issue with the module called “Login Brute-Forcing,” specifically in the section on Basic HTTP Authentication.

I successfully used Hydra to brute-force the target and obtained the username “basic-auth-user” along with the easy password. However, they ask the following question:

“After successfully brute-forcing and then logging into the target, what is the full flag you find?”

With the credentials I gathered, I understand that I need to log into the target to retrieve the flag. I tried using the following SSH command:

“ssh basic-auth-user@94.237.51.124

But I’m getting the error message:

basic-auth-user@94.237.51.124: Permission denied (publickey).

Am I doing something wrong? Could there be another way to connect to the target other than SSH?

Thanks for your help!

Hack0p

go to http://IP:PORT in firefox on your pwnbox. This module is about basic http authentication. Its login splash boxes on a web page.