Re: hydra and HTTP NTLM

[Tony Turner <tony_l_turner () yahoo com>]

Have you tried http://www.foofus.net/~jmk/tools/FPbrute.pl yet? Or is there a reason you wanted to use Hydra?


________________________________
 From: Robin Wood <robin () digininja org>
To: _ <packetnull () gmail com> 
Cc: "webappsec () securityfocus com" <webappsec () securityfocus com>; PaulDotCom Mailing List <pauldotcom () mail 
pauldotcom com> 
Sent: Thursday, May 24, 2012 8:17 AM
Subject: Re: [Pauldotcom] hydra and HTTP NTLM
 
On 24 May 2012 13:06, _ <packetnull () gmail com> wrote:
> http ntlm is IIS based windows auth.

Yes but I still don't know how to attack it.

Robin

> On May 23, 2012, at 6:14 AM, Robin Wood <robin () digininja org> wrote:
>
> > Anyone know how to use the new HTTP NTLM feature in Hydra? I'm trying
> > to brute force a MS Front Page login which only asks for
> > authentication when the OPTIONS method is used as far as I can tell.
> >
> > Robin
> >
> >
> >
> > This list is sponsored by Cenzic
> > --------------------------------------
> > Let Us Hack You. Before Hackers Do!
> > It's Finally Here - The Cenzic Website HealthCheck. FREE.
> > Request Yours Now!
> > http://www.cenzic.com/2009HClaunch_Securityfocus
> > --------------------------------------
_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com

_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com