Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Won't parse -P list charset past the first line - systematic wrong success #58

Closed
bugith opened this issue May 12, 2023 · 1 comment
Closed

Comments

@bugith
Copy link

bugith commented May 12, 2023

Even though I don't specify -f :

/usr/local/bin/medusa -c 2000 -t1 -u admin -h 192.168.0.12 -P ./brute perso -M http 
Medusa v2.3_devel [http://www.foofus.net] (C) JoMo-Kun / Foofus Networks <jmk@foofus.net>

2023-05-12 22:33:23 ACCOUNT CHECK: [http] Host: 192.168.0.12 (1 of 1, 0 complete) User: admin (1 of 1, 0 complete) Password: e (1 of 5399042 complete)
2023-05-12 22:33:23 ACCOUNT FOUND: [http] Host: 192.168.0.12 User: admin Password: e [SUCCESS]

Same with deliberately wrong user name (admi instead of admin) :

/usr/local/bin/medusa -c 2000 -t1 -u admi -h 192.168.0.12 -P ./brute perso -M http 
Medusa v2.3_devel [http://www.foofus.net] (C) JoMo-Kun / Foofus Networks <jmk@foofus.net>

2023-05-12 22:33:23 ACCOUNT CHECK: [http] Host: 192.168.0.12 (1 of 1, 0 complete) User: admi (1 of 1, 0 complete) Password: e (1 of 5399042 complete)
2023-05-12 22:33:23 ACCOUNT FOUND: [http] Host: 192.168.0.12 User: admi Password: e [SUCCESS]

Log+Verbose:

/usr/local/bin/medusa -c 2000 -t1 -u admi -h 192.168.0.12 -P ./brute perso -M http  -b -v6 -w7
DEBUG [86F39000]: Successfully loaded login information.
GENERAL: Parallel Hosts: 1 Parallel Logins: 1
GENERAL: Total Hosts: 1 
GENERAL: Total Users: 1
GENERAL: Total Passwords: 5399042
DEBUG [7FFFF640]: startModule iId: 0 pLogin: 84B69C20 modParams->argv: 332732A0 modParams: 84B69C00
DEBUG [7FFFF640]: Trying module path of .
DEBUG [7FFFF640]: Attempting to load ./http.mod
DEBUG [7FFFF640]: Trying module path of /usr/local/lib/medusa/modules
DEBUG [7FFFF640]: Attempting to load /usr/local/lib/medusa/modules/http.mod
DEBUG [7FFFF640]: [getNextNormalCred] Initial credential set request for login module.
DEBUG [7FFFF640]: [getNextNormalCred] (PARALLEL_LOGINS_PASSWORD) setting user: admi
DEBUG [7FFFF640]: Connected (internal)
DEBUG [7FFFF640]: Data sent: GET / HTTP/1.1[0D][0A]Host: 192.168.0.12:80[0D][0A]User-Agent: Mozilla/1.22 (compatible; MSIE 10.0; Windows 3.1)[0D][0A][0D][0A]
DEBUG [7FFFF640]: Regular expession: "HTTP/1.* .*[0D][0A]"
DEBUG [7FFFF640]: Data receive: Data waiting.
DEBUG [7FFFF640]: Data received (17): HTTP/1.0 200 OK[0D][0A]
DEBUG [7FFFF640]: Formatted data received (size 17): HTTP/1.0 200 OK[0D][0A]
DEBUG [7FFFF640]: Successfully matched regex.
DEBUG [7FFFF640]: Disconnect successful
DEBUG [7FFFF640]: Connected (internal)
2023-05-12 22:57:14 ACCOUNT CHECK: [http] Host: 192.168.0.12 (1 of 1, 0 complete) User: admi (1 of 1, 0 complete) Password: e (1 of 5399042 complete)
2023-05-12 22:57:14 ACCOUNT FOUND: [http] Host: 192.168.0.12 User: admi Password: e [SUCCESS]
INFO: Login Module: 0 - Current user password list is complete, selecting next user.
INFO: Login Module: 0 - Current user password list is complete, rescanning userlist for unfinished credentials.
INFO: Login Module: 0 - Current user password list is complete, selecting next user.
INFO: Login Module: 0 - No more user accounts available for testing.
INFO: Login Module: 0 - No more users/passwords available in the normal queue.
DEBUG [7FFFF640]: Retrieving the next available credential set from list of previously missed sets.
INFO: Login Module: 0 - No additional missed users/passwords, setting credential status to CREDENTIAL_DONE.
DEBUG [7FFFF640]: Disconnect successful
GENERAL: Medusa has finished.
@bugith
Copy link
Author

bugith commented May 13, 2023

Sorry, it seems I have to learn a lot http.

@bugith bugith closed this as completed May 13, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant