Hi!!

Can you help me with medusa?
I'm trying to found the password of this web: http://correu.xtec.cat/iwc_static/layout/login.html

I'm using this order:
medusa -u lalal P /rs.txt -M web-form -m FORM:"iwc_static/layout/login.html" -m FORM-DATA:"post?user=&pass=&submit=True" -m DENY-SIGNAL:"incorrect" -h correu.xtec.cat

But it doesn't work. I thinks it's for the form-data but I don't how this work...
Can somebody help me please :)

I think it should be a syntax error for the form. You should try to check if there is some error on the lines. The web form is kind of secure so most error might not work properly.

Well, this post is way old. But it probably had something to do with:

Code: Select all

-P /rs.txt

I've never used that program, but programs like that usually like the pass file in the same directory without special characters included. My second guess would be that he wasn't looking to see how the login was sending the pass for verification. Thus didn't have the form info correct. Whoooo knows???

I found the problem... I was attacking the wrong page --'
Thanks for you help!