RedTeam Capstone Challegen TryHackMe

Day 3

This room is a very simple introduction to the tool Hydra which helps in brute forcing.

Learning Objectives

  • Password complexity and the number of possible combinations

  • How the number of possible combinations affects the feasibility of brute force attacks

  • Generating password combinations using crunch

  • Trying out passwords automatically using hydra

The room is very straightforward with all the commands given to us already we just need to run them.

After starting the maching and going to the site. We find a keypad like interface

Upon entering a random code we can see it is only a 3 digit pin, should be very quick to brute force.

The numeric keypad shows 16 characters, 0 to 9 and A to F, i.e., the hexadecimal digits. We need to prepare a list of all the PIN codes that match this criteria. We will use Crunch, a tool that generates a list of all possible password combinations based on given criteria. We need to issue the following command:

crunch 3 3 0123456789ABCDEF -o 3digits.txt

The command above specifies the following:

  • 3 the first number is the minimum length of the generated password

  • 3 the second number is the maximum length of the generated password

  • 0123456789ABCDEF is the character set to use to generate the passwords

  • -o 3digits.txt saves the output to the 3digits.txt file

the main login page http://10.10.125.46:8000/pin.php receives the input from the user and sends it to /login.php using the name pin.

These three pieces of information, post, /login.php, and pin, are necessary to set the arguments for Hydra.

We will use hydra to test every possible password that can be put into the system. The command to brute force the above form is:

The command above will try one password after another in the 3digits.txt file.

We get the PIN for the keypad. Now we just enter it in the Keypad.

Now we just need to click on Unlock Door and it will give us our flag.

PreviousDay 2NextDay 4

Last updated

Was this helpful?