Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add unauthorized vulnerability to result #667

Open
freeAhao opened this issue Jun 21, 2021 · 1 comment
Open

Add unauthorized vulnerability to result #667

freeAhao opened this issue Jun 21, 2021 · 1 comment

Comments

@freeAhao
Copy link

For example

hydra redis://127.0.0.1:6379 -P top1000.txt -o out-hydra.json -b json
Hydra v9.2 (c) 2021 by van Hauser/THC & David Maciejak - Please do not use in military or secret service organizations, or for illegal purposes (this is non-binding, these *** ignore laws and ethics anyway).

Hydra (https://github.com/vanhauser-thc/thc-hydra) starting at 2021-06-21 16:15:22
[DATA] max 16 tasks per 1 server, overall 16 tasks, 1056 login tries (l:1/p:1056), ~66 tries per task
[DATA] attacking redis://127.0.0.1:6379/
[!] The server 127.0.0.1 does not require password.

Got a unauthorized redis vulnerability

Do not have this info in result file

{ "generator": {
	"software": "Hydra", "version": "v9.2", "built": "2021-06-21 16:18:02",
	"server": "127.0.0.1", "service": "redis", "jsonoutputversion": "1.00",
	"commandline": "hydra -P top1000.txt -o out-hydra.json -b json redis://127.0.0.1:6379"
	},
"results": [
	],
"success": false,
"errormessages": [ "[ERROR] unexpected result connecting to target 127.0.0.1 port 6379" ],
"quantityfound": 0   }
@vanhauser-thc
Copy link
Owner

I agree that would be good to have there.
would you mind to submit a pull request which adds this?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants