github/thc-hydra
1
0
Fork 0
mirror of https://github.com/vanhauser-thc/thc-hydra.git synced 2025-07-05 20:41:39 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

add 2= optional parameter to http-post-form

Browse source
This commit is contained in:
vanhauser-thc 2022-05-05 09:33:49 +02:00
parent a1cbbe1432
commit 7591dcc60b
2 changed files with 17 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

2
CHANGES
View file

@ -4,6 +4,8 @@ Changelog for hydra
Release 9.4-dev Release 9.4-dev
* Switched from pcre/pcre3 to pcre2 as pcre/pcre3 will be dropped from Debian * Switched from pcre/pcre3 to pcre2 as pcre/pcre3 will be dropped from Debian
* Small fix for weird RTSP servers * Small fix for weird RTSP servers
* Added "2=" optional parameter to http-post-form module to tell hydra that
a "302" HTTP return code means success
Release 9.3 Release 9.3

22
hydra-http-form.c
View file

@ -75,6 +75,7 @@ typedef struct cookie_node {
int32_t success_cond = 0; int32_t success_cond = 0;
int32_t getcookie = 1; int32_t getcookie = 1;
int32_t auth_flag = 0; int32_t auth_flag = 0;
int32_t code_302_is_success = 0;
char cookie[4096] = "", cmiscptr[1024]; char cookie[4096] = "", cmiscptr[1024];
@ -441,6 +442,9 @@ int32_t parse_options(char *miscptr, ptr_header_node *ptr_head) {
sprintf(cookieurl, "%.1000s", hydra_strrep(miscptr + 2, "\\:", ":")); sprintf(cookieurl, "%.1000s", hydra_strrep(miscptr + 2, "\\:", ":"));
miscptr = ptr; miscptr = ptr;
break; break;
case '2':
code_302_is_success = 1;
break;
case 'g': // fall through case 'g': // fall through
case 'G': case 'G':
ptr = miscptr + 2; ptr = miscptr + 2;
@ -951,12 +955,16 @@ int32_t start_http_form(int32_t s, char *ip, int32_t port, unsigned char options
found = analyze_server_response(s); found = analyze_server_response(s);
if (redirected_flag && code_302_is_success) {
found = success_cond;
}
if (auth_flag) { // we received a 401 error - user is using wrong module if (auth_flag) { // we received a 401 error - user is using wrong module
hydra_report(stderr, hydra_report(stderr,
"[ERROR] the target is using HTTP auth, not a web form, received HTTP " "[ERROR] the target is using HTTP auth, not a web form, received HTTP "
"error code 401. Use module \"http%s-get\" instead.\n", "error code 401. Use module \"http%s-get\" instead.\n",
(options & OPTION_SSL) > 0 ? "s" : ""); (options & OPTION_SSL) > 0 ? "s" : "");
return 4; return 2;
} }
if (strlen(cookie) > 0) if (strlen(cookie) > 0)
@ -967,7 +975,7 @@ int32_t start_http_form(int32_t s, char *ip, int32_t port, unsigned char options
if (debug) if (debug)
printf("[DEBUG] attempt result: found %d, redirect %d, location: %s\n", found, redirected_flag, redirected_url_buff); printf("[DEBUG] attempt result: found %d, redirect %d, location: %s\n", found, redirected_flag, redirected_url_buff);
while (found == 0 && redirected_flag && (redirected_url_buff[0] != 0) && (redirected_cpt > 0)) { while (found == 0 && redirected_flag && !code_302_is_success && (redirected_url_buff[0] != 0) && (redirected_cpt > 0)) {
// we have to split the location // we have to split the location
char *startloc, *endloc; char *startloc, *endloc;
char str[2048]; char str[2048];
@ -1108,7 +1116,7 @@ int32_t start_http_form(int32_t s, char *ip, int32_t port, unsigned char options
} }
// if the last status is still 3xx, set it as a false // if the last status is still 3xx, set it as a false
if (found != -1 && found == success_cond && (redirected_flag == 0 || success_cond == 1) && redirected_cpt >= 0) { if (found != -1 && found == success_cond && ((redirected_flag && code_302_is_success) || redirected_flag == 0 || success_cond == 1) && redirected_cpt >= 0) {
hydra_report_found_host(port, ip, "www-form", fp); hydra_report_found_host(port, ip, "www-form", fp);
hydra_completed_pair_found(); hydra_completed_pair_found();
} else { } else {
@ -1436,8 +1444,9 @@ void usage_http_form(const char *service) {
" login check must be preceded by \"S=\".\n" " login check must be preceded by \"S=\".\n"
" This is where most people get it wrong. You have to check the webapp " " This is where most people get it wrong. You have to check the webapp "
"what a\n" "what a\n"
" failed string looks like and put it in this parameter!\n" " failed string looks like and put it in this parameter! Add the -d switch to see\nthe sent/received data!\n"
"The following parameters are optional:\n" "\nThe following parameters are optional:\n"
" 2= 302 page forward return codes identify a successful attempt\n"
" (c|C)=/page/uri to define a different page to gather initial " " (c|C)=/page/uri to define a different page to gather initial "
"cookies from\n" "cookies from\n"
" (g|G)= skip pre-requests - only use this when no pre-cookies are required\n" " (g|G)= skip pre-requests - only use this when no pre-cookies are required\n"
@ -1451,8 +1460,7 @@ void usage_http_form(const char *service) {
"exists, by the\n" "exists, by the\n"
" one supplied by the user, or add the header at the " " one supplied by the user, or add the header at the "
"end\n" "end\n"
"Note that if you are going to put colons (:) in your headers you should " "\nNote that if you are going to put colons (:) in your headers you should escape them with a backslash (\\).\n"
"escape them with a backslash (\\).\n"
" All colons that are not option separators should be escaped (see the " " All colons that are not option separators should be escaped (see the "
"examples above and below).\n" "examples above and below).\n"
" You can specify a header without escaping the colons, but that way you " " You can specify a header without escaping the colons, but that way you "