Burp Suite and Hydra vs DVWA

AS MENTIONED IN THE VIDEO:
- My generating passwords video: • 4 Simple Tools to Help...
- My setting up DVWA video: • 1 Simple Way to Learn ...
CONNECT WITH ME:
LinkedIn: / thegaryruddell
X: / thegaryruddell
Instagram: / thegaryruddell
Website: www.garyruddell.com
🎵 Where I get my Music (amazing for KZbinrs) - share.epidemicsound.com/ye2zqm
PS: Some of the links in this description are affiliate links that I get a kickback from 🤝

[@tylercoan]

I swear KZbin algorithms are spying on me. Your video is timely. Just went over this topic in TCM's class.

[@theGaryRuddell]

Oh the algorithm is DEFINITELY working the magic!

[@user-uh1zo7bg2z]

KEEP UP THE GOOD WORK

[@theGaryRuddell]

Thank you so much!!

[@pbrown22]

Another Great video Gary

[@theGaryRuddell]

Glad you enjoyed it pal!

[@teachmecyber]

BurpSutie is a great tool to know. You can do so much with it.

[@theGaryRuddell]

Yeah it’s incredible. There’s really not a competitor I know of??

[@verynaughtyg]

simple and quick.. thanks a lot

[@theGaryRuddell]

You're welcome!

[@nullowl1305]

Great to see you starting off this year with amazing content Gary ! What's your take on different tools for Bruteforcing,lets say we have hydra,John the ripper and hashcat,how do you ideally choose between them I'm kinda confused sometimes,does it depends upon what exactly we looking for ?

[@theGaryRuddell]

Yeah I’m recording a Hashcat video very soon. Hashcat is mainly used if you get hashes from say /etc/passwd or anywhere else for that matter, and you want to crack them. You can do it really cheap in the cloud these days. Hydra is great for CTFs and things like that, but you can’t really have much success on enterprise systems because of MFA and Fail2Ban etc. John the Ripper is similar to Hashcat in many ways at a basic level.

[@nullowl1305]

@@theGaryRuddellOkay got it thanks 👍🏻

[@diogorech]

Thank you for sharing your knowledge! I followed the steps of the video and always get 16 valid passwords, none of which were actually the correct one. Where should I start to solve this problem ?

[@theGaryRuddell]

Hey it’s hard to say from here! But I’d recommend watching other tutorials to see if something clicks!

[@jejakperetas]

🙂 thank you

[@theGaryRuddell]

You’re welcome 😊

[@petregmd]

Nice video, Gary! Do you mind if I write a short blog post based on this video? I will mention the source. 🙂

[@theGaryRuddell]

Yeah sure! I’d love to see where you share it in the end. I’m on LinkedIn too if it’s easier to talk there 😊

[@petregmd]

@@theGaryRuddell Thank you, Gary. I will share it on LinkedIn. 🙂

[@Stuff-morestuff]

whatever I do I can't get username=test&password=test&login=login to show up

[@U-shapeMgall]

What about the app that I download how to find the name and password

[@eTqXfc6ODY7g8bDV]

Hello I have two problems. I look for my password but I don't need to have a login. I only need a password to log in. So how I do to make an attack without the flag -l or -L. Morover my request body for the http-post-form is "username=admin&password=c9bcacd403244145cea61db556e9efd0" and hydra say that "the variables argument needs at least the strings ^USER^, ^PASS^, ^USER64^ or ^PASS64^. I don't kwon how to do. Can you help me ?

[@theGaryRuddell]

Try using another tool like Brutus or Burp Suite. I’m not sure on this one!

[@eTqXfc6ODY7g8bDV]

@@theGaryRuddell Ok but do you know how I can do if I only need a password to log in and not a login ? How can I process ?

[@theGaryRuddell]

Brutus and Burp have that functionality!

[@eTqXfc6ODY7g8bDV]

@@theGaryRuddell ok thank you. I will test them later.

[@noureldinehab2686]

💙

[@theGaryRuddell]

💚

[@user-sc4th6rq9d]

What is the format if website start from https mean secure

[@theGaryRuddell]

Sorry I don’t understand the question

[@ReligionAndMaterialismDebunked]

Early :3

[@gerdmuller8258]

ciao, io sono stato hackerato su outlook. Ho seguito il tuo video che si può fare su outlook?

[@theGaryRuddell]

Grazie per la visione, se vieni violato su Outlook, dovrai parlare con il supporto Microsoft.

[@gerdmuller8258]

@@theGaryRuddell ho provato contattare con il supporto su Xbox Microsoft. Hanno detto che non si può recuperare account. Quindi il tuo video si può recuperare l'account Outlook?

[@theGaryRuddell]

@@gerdmuller8258 Se Microsoft non riesce a recuperare un account compromesso, nessun altro può farlo. Scusa amico!

[@user-sb5tc1uo2f]

Kali Linux,Can I hack Facebook account suing this

[@theGaryRuddell]

😂 you want to go to prison for 20 years?

[@user-sb5tc1uo2f]

@@theGaryRuddell yes

[@user-sb5tc1uo2f]

@@theGaryRuddell please help me

[@Drluxurious]

will this work to hack an old Gmail account? if yes how? forgot the password to my old Gmail account.

[@theGaryRuddell]

Whether it’s an old account or not, you’re hacking Google. That’s stupid. Just email customer support and prove it’s your old account.

[@PCs454]

why is the audio so quiet even at 100% volume ;//////

[@theGaryRuddell]

It isn’t for me. Make sure your KZbin volume AND your computer volume are right?

[@PCs454]

@@theGaryRuddell both are on 100% and i got a notification and it scared me as it was so loud, its just youtube is acting weird. and it affect other videos too..

[@theGaryRuddell]

@PCs454 😂 Yeah it works fine for all of my devices.

[@joebol2036]

you did not cover the other important aspect re users and passwords files. Where/how did you get them?

[@theGaryRuddell]

Correct. I did not. Have you Googled “where can I find username and password combinations”?

[@harijs6263]

Hi, i sent you an email, if you are able to reply, it would be great!

[@theGaryRuddell]

Great chatting with you 😊