MEDUSA WEB-FORM

Get the latest on wired & wireless, talk network setups, get help with connectivity problems, web hosts, etc.
Post Reply
kimpa2007
n00b
Posts: 2
Joined: Wed Apr 28, 2010 3:18 pm

MEDUSA WEB-FORM

Post by kimpa2007 » Wed Apr 28, 2010 4:38 pm

Hi!!

Can you help me with medusa?
I'm trying to found the password of this web: http://correu.xtec.cat/iwc_static/layout/login.html

I'm using this order:
medusa -u lalal P /rs.txt -M web-form -m FORM:"iwc_static/layout/login.html" -m FORM-DATA:"post?user=&pass=&submit=True" -m DENY-SIGNAL:"incorrect" -h correu.xtec.cat

But it doesn't work. I thinks it's for the form-data but I don't how this work...
Can somebody help me please :)
Last edited by kimpa2007 on Fri Sep 28, 2012 9:18 am, edited 1 time in total.

weilacher
n00b
Posts: 2
Joined: Fri Feb 18, 2011 2:16 am

Re: MEDUSA WEB-FORM

Post by weilacher » Fri Feb 18, 2011 2:20 am

I think it should be a syntax error for the form. You should try to check if there is some error on the lines. The web form is kind of secure so most error might not work properly.
Website and Webdesign in indianapolis seo and indiana seo Internet

User avatar
Thor
htd0rg lieutenant
Posts: 440
Joined: Tue Dec 18, 2007 9:39 am
Location: Location Location

Re: MEDUSA WEB-FORM

Post by Thor » Tue Feb 22, 2011 11:15 pm

Well, this post is way old. But it probably had something to do with:

Code: Select all

-P /rs.txt
I've never used that program, but programs like that usually like the pass file in the same directory without special characters included. My second guess would be that he wasn't looking to see how the login was sending the pass for verification. Thus didn't have the form info correct. Whoooo knows???
Quidquid latine dictum sit, altum sonatur.
- Whatever is said in Latin sounds profound.

Omnis Vestri Substructio Es Servus Ad Nobis.
- All Your Base Are Belong To Us

kimpa2007
n00b
Posts: 2
Joined: Wed Apr 28, 2010 3:18 pm

Re: MEDUSA WEB-FORM

Post by kimpa2007 » Sun Nov 06, 2011 2:22 pm

I found the problem... I was attacking the wrong page --'
Thanks for you help!

Post Reply