Scanning websites with Nmap is a lot of fun.
How to brute force credentials on a website server using Nmap.
brute
How to brute force a server and discover valid credentials like usernames.
How to use Nmap to brute force usernames on a remote server.
Crack an SSH password with hydra and ways to avoid this in future.
I used this command to crack a Linux SSH account with hydra. hydra -l trump -P rockyou.txt ssh://192.168.1.2hydra -l trump -P rockyou.txt ssh://192.168.1.2 And this is the output I got once I managed to crack the user account over SSH. This is why you have fail2ban and other protections against brute force attacks. ┌─[✗]─[root@parrot]─[~/hs] └──╼ … Read more
How to brute force a WordPress password with Kali Linux and the Linux command line.
The wpscan utility may be used to brute force a WordPress password very easily. But firstly, we need the WordPress username. Get it like this. Using Nmap. As Nmap supports user enumeration for WordPress, this is easy. ubuntu ~ $ nmap -sV –script http-wordpress-enum –script-args limit=195 somewordpresssite.com Starting Nmap 6.40 ( http://nmap.org ) at … Read more