Burp Suite and Hydra vs DVWA

Поделиться
HTML-код
  • Опубликовано: 21 авг 2024
  • AS MENTIONED IN THE VIDEO:
    - My generating passwords video: • 4 Simple Tools to Help...
    - My setting up DVWA video: • 1 Simple Way to Learn ...
    CONNECT WITH ME:
    LinkedIn: / thegaryruddell
    X: / thegaryruddell
    Instagram: / thegaryruddell
    Website: www.garyruddel...
    🎵 Where I get my Music (amazing for RUclipsrs) - share.epidemic...
    PS: Some of the links in this description are affiliate links that I get a kickback from 🤝

Комментарии • 53

  • @tylercoan
    @tylercoan Год назад +8

    I swear RUclips algorithms are spying on me. Your video is timely. Just went over this topic in TCM's class.

    • @theGaryRuddell
      @theGaryRuddell  Год назад +1

      Oh the algorithm is DEFINITELY working the magic!

  • @teachmecyber
    @teachmecyber Год назад +1

    BurpSutie is a great tool to know. You can do so much with it.

    • @theGaryRuddell
      @theGaryRuddell  Год назад

      Yeah it’s incredible. There’s really not a competitor I know of??

  • @pbrown22
    @pbrown22 Год назад +3

    Another Great video Gary

  • @MHamidAshraf
    @MHamidAshraf 5 месяцев назад +2

    simple and quick.. thanks a lot

  • @user-uh1zo7bg2z
    @user-uh1zo7bg2z 11 месяцев назад +1

    KEEP UP THE GOOD WORK

  • @nullowl1305
    @nullowl1305 Год назад +2

    Great to see you starting off this year with amazing content Gary !
    What's your take on different tools for Bruteforcing,lets say we have hydra,John the ripper and hashcat,how do you ideally choose between them I'm kinda confused sometimes,does it depends upon what exactly we looking for ?

    • @theGaryRuddell
      @theGaryRuddell  Год назад

      Yeah I’m recording a Hashcat video very soon. Hashcat is mainly used if you get hashes from say /etc/passwd or anywhere else for that matter, and you want to crack them. You can do it really cheap in the cloud these days. Hydra is great for CTFs and things like that, but you can’t really have much success on enterprise systems because of MFA and Fail2Ban etc. John the Ripper is similar to Hashcat in many ways at a basic level.

    • @nullowl1305
      @nullowl1305 Год назад

      @@theGaryRuddellOkay got it thanks 👍🏻

  • @noureldinehab2686
    @noureldinehab2686 Год назад +2

    💙

  • @petregmd
    @petregmd Год назад +2

    Nice video, Gary! Do you mind if I write a short blog post based on this video? I will mention the source. 🙂

    • @theGaryRuddell
      @theGaryRuddell  Год назад +1

      Yeah sure! I’d love to see where you share it in the end. I’m on LinkedIn too if it’s easier to talk there 😊

    • @petregmd
      @petregmd Год назад

      @@theGaryRuddell Thank you, Gary. I will share it on LinkedIn. 🙂

  • @jejakperetas
    @jejakperetas Год назад +1

    🙂 thank you

  • @diogorech
    @diogorech Год назад

    Thank you for sharing your knowledge! I followed the steps of the video and always get 16 valid passwords, none of which were actually the correct one. Where should I start to solve this problem ?

    • @theGaryRuddell
      @theGaryRuddell  Год назад

      Hey it’s hard to say from here! But I’d recommend watching other tutorials to see if something clicks!

  • @ReligionAndMaterialismDebunked
    @ReligionAndMaterialismDebunked Год назад +1

    Early :3

  • @eTqXfc6ODY7g8bDV
    @eTqXfc6ODY7g8bDV Год назад +1

    Hello I have two problems. I look for my password but I don't need to have a login. I only need a password to log in. So how I do to make an attack without the flag -l or -L. Morover my request body for the http-post-form is "username=admin&password=c9bcacd403244145cea61db556e9efd0" and hydra say that "the variables argument needs at least the strings ^USER^, ^PASS^, ^USER64^ or ^PASS64^. I don't kwon how to do. Can you help me ?

    • @theGaryRuddell
      @theGaryRuddell  Год назад +1

      Try using another tool like Brutus or Burp Suite. I’m not sure on this one!

    • @eTqXfc6ODY7g8bDV
      @eTqXfc6ODY7g8bDV Год назад +1

      @@theGaryRuddell Ok but do you know how I can do if I only need a password to log in and not a login ? How can I process ?

    • @theGaryRuddell
      @theGaryRuddell  Год назад

      Brutus and Burp have that functionality!

    • @eTqXfc6ODY7g8bDV
      @eTqXfc6ODY7g8bDV Год назад

      @@theGaryRuddell ok thank you. I will test them later.

  • @Stuff-morestuff
    @Stuff-morestuff 4 месяца назад

    whatever I do I can't get username=test&password=test&login=login to show up

  • @gerdmuller8258
    @gerdmuller8258 6 месяцев назад +1

    ciao, io sono stato hackerato su outlook. Ho seguito il tuo video che si può fare su outlook?

    • @theGaryRuddell
      @theGaryRuddell  6 месяцев назад

      Grazie per la visione, se vieni violato su Outlook, dovrai parlare con il supporto Microsoft.

    • @gerdmuller8258
      @gerdmuller8258 6 месяцев назад

      @@theGaryRuddell ho provato contattare con il supporto su Xbox Microsoft. Hanno detto che non si può recuperare account. Quindi il tuo video si può recuperare l'account Outlook?

    • @theGaryRuddell
      @theGaryRuddell  6 месяцев назад

      @@gerdmuller8258 Se Microsoft non riesce a recuperare un account compromesso, nessun altro può farlo. Scusa amico!

  • @U-shapeMgall
    @U-shapeMgall 3 месяца назад

    What about the app that I download how to find the name and password

  • @user-sc4th6rq9d
    @user-sc4th6rq9d 7 месяцев назад

    What is the format if website start from https mean secure

    • @theGaryRuddell
      @theGaryRuddell  7 месяцев назад

      Sorry I don’t understand the question

  • @PCs454
    @PCs454 5 месяцев назад

    why is the audio so quiet even at 100% volume ;//////

    • @theGaryRuddell
      @theGaryRuddell  5 месяцев назад

      It isn’t for me. Make sure your RUclips volume AND your computer volume are right?

    • @PCs454
      @PCs454 5 месяцев назад

      @@theGaryRuddell both are on 100% and i got a notification and it scared me as it was so loud,
      its just youtube is acting weird. and it affect other videos too..

    • @theGaryRuddell
      @theGaryRuddell  5 месяцев назад

      @PCs454 😂
      Yeah it works fine for all of my devices.

  • @user-sb5tc1uo2f
    @user-sb5tc1uo2f 5 месяцев назад

    Kali Linux,Can I hack Facebook account suing this

  • @Drluxurious
    @Drluxurious 4 месяца назад

    will this work to hack an old Gmail account? if yes how? forgot the password to my old Gmail account.

    • @theGaryRuddell
      @theGaryRuddell  4 месяца назад +1

      Whether it’s an old account or not, you’re hacking Google. That’s stupid. Just email customer support and prove it’s your old account.

  • @joebol2036
    @joebol2036 4 месяца назад

    you did not cover the other important aspect re users and passwords files. Where/how did you get them?

    • @theGaryRuddell
      @theGaryRuddell  4 месяца назад

      Correct. I did not. Have you Googled “where can I find username and password combinations”?

  • @harijs6263
    @harijs6263 Год назад +1

    Hi, i sent you an email, if you are able to reply, it would be great!