Hydra & Invalid Certificates

[nohope91]

I have been using hydra for a few years and I'm now very good with it Recently I encountered a problem testing a web form, I'm mostly sure there's no problem in the syntax, but the console log output gives me false positives, which mostly happens when there's a mistake is in the syntax, I revised the syntax over and over, but the form still throwing false positives. But the website responds that its certificate is not valid, with error code: SEC_ERROR_UNKNOWN_ISSUER I'm just not sure is the invalid cert prevents hydra from connecting? I guess hydra doesn't verify certs, but please I need to make sure. If not, then it must be in the syntax, which I won't revise again, I give up ;) Thank you ..

[vanhauser-thc]

hydra does not validate certificates. It does not care if a cert is valid or not.

however, it might be that the web server requires a client certificate that is by a CA that the web server trusts.

try to use a web browser to connect there, it should have the same issue if that is the case

[nohope91]

If that is the case, will this have any affect on hydra? Yes Sir, I already have, and that's what I get when I try to connect through a browser : I don't mind about the browser, as you know once I click "Add Exception" I can override it. Since hydra doesn't validate certificates, then do you think the problem behind the false positives is some mistake in the syntax? Thank you SO MUCH for your time Sir ;)

[vanhauser-thc]

what happens if you click accept? do you see the login form?

[nohope91]

Yes Sir, I do. Without any problem..

[vanhauser-thc]

can you please paste the full output of:

hydra -dv -l test -p test https-get://[TARGET]

[nohope91]

Okay Sir, but just note the target uses https-post-form Should I replace https-get://[TARGET] with https-post-form://[TARGET] ?

[nohope91]

I forgot that the [https-post-form] needs a syntax, sorry my bad :-1: Well, I got lots of data, I guess that's why you said: paste the FULL OUTPUT :) I have obscured all the target data, I don't want anyone to attack it, I believe in your belief that the real point of using hydra is just for education & penetration testing not for illegal purposes, but if you want to see it I will send it in a private message.

hydra -dv -l test -p test https-get://...:8089 Hydra v8.3 (c) 2016 by van Hauser/THC - Please do not use in military or secret service organizations, or for illegal purposes.

[DEBUG] Output color flag is 1 Hydra (http://www.thc.org/thc-hydra) starting at 2017-02-19 01:14:57 [DEBUG] cmdline: hydra -dv -l test -p test https-get://...:8089 [DEBUG] opt:6 argc:7 mod:https-get tgt:... port:8089 misc:(null) [WARNING] You must supply the web page as an additional option or via -m, default path set to / [DATA] max 1 task per 1 server, overall 64 tasks, 1 login try (l:1/p:1), ~0 tries per task [DATA] attacking service http-get on port 8089 with SSL [VERBOSE] Resolving addresses ... [DEBUG] resolving ... [VERBOSE] resolving done [DEBUG] Code: attack Time: 1487459697 [DEBUG] Options: mode 0 ssl 1 restore 0 showAttempt 0 tasks 1 max_use 64 tnp 0 tpsal 0 tprl 0 exit_found 0 miscptr / service http-get [DEBUG] Brains: active 0 targets 1 finished 0 todo_all 1 todo 1 sent 0 found 0 countlogin 1 sizelogin 5 countpass 1 sizepass 5 [DEBUG] Target 0 - target ... ip ... login_no 0 pass_no 0 sent 0 pass_state 0 redo_state 0 (0 redos) use_count 0 failed 0 done 0 fail_count 0 login_ptr test pass_ptr test [DEBUG] Task 0 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 1 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 2 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 3 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 4 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 5 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 6 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 7 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 8 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 9 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 10 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 11 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 12 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 13 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 14 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 15 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 16 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 17 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 18 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 19 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 20 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 21 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 22 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 23 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 24 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 25 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 26 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 27 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 28 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 29 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 30 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 31 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 32 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 33 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 34 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 35 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 36 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 37 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 38 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 39 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 40 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 41 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 42 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 43 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 44 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 45 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 46 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 47 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 48 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 49 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 50 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 51 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 52 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 53 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 54 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 55 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 56 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 57 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 58 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 59 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 60 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 61 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 62 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Task 63 - pid 0 active 0 redo 0 current_login_ptr (null) current_pass_ptr (null) [DEBUG] Tasks 64 inactive 0 active [DEBUG] child 0 got target 0 selected [DEBUG] child 0 spawned for target 0 with pid 2061 [DEBUG] child 1 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 1, kill 0, fail 3 [DEBUG] child 2 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 2, kill 0, fail 3 [DEBUG] child 3 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 3, kill 0, fail 3 [DEBUG] child 4 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 4, kill 0, fail 3 [DEBUG] child 5 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 5, kill 0, fail 3 [DEBUG] child 6 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 6, kill 0, fail 3 [DEBUG] child 7 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 7, kill 0, fail 3 [DEBUG] head_no 0 has pid 2061 [DEBUG] child 8 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 8, kill 0, fail 3 [DEBUG] child 9 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 9, kill 0, fail 3 [DEBUG] child 10 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 10, kill 0, fail 3 [DEBUG] child 11 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 11, kill 0, fail 3 [DEBUG] child 12 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 12, kill 0, fail 3 [DEBUG] child 13 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 13, kill 0, fail 3 [DEBUG] child 14 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 14, kill 0, fail 3 [DEBUG] child 15 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 15, kill 0, fail 3 [DEBUG] child 16 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 16, kill 0, fail 3 [DEBUG] child 17 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 17, kill 0, fail 3 [DEBUG] child 18 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 18, kill 0, fail 3 [DEBUG] child 19 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 19, kill 0, fail 3 [DEBUG] child 20 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 20, kill 0, fail 3 [DEBUG] child 21 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 21, kill 0, fail 3 [DEBUG] child 22 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 22, kill 0, fail 3 [DEBUG] child 23 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 23, kill 0, fail 3 [DEBUG] child 24 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 24, kill 0, fail 3 [DEBUG] child 25 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 25, kill 0, fail 3 [DEBUG] child 26 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 26, kill 0, fail 3 [DEBUG] child 27 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 27, kill 0, fail 3 [DEBUG] child 28 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 28, kill 0, fail 3 [DEBUG] child 29 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 29, kill 0, fail 3 [DEBUG] child 30 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 30, kill 0, fail 3 [DEBUG] child 31 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 31, kill 0, fail 3 [DEBUG] child 32 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 32, kill 0, fail 3 [DEBUG] child 33 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 33, kill 0, fail 3 [DEBUG] child 34 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 34, kill 0, fail 3 [DEBUG] child 35 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 35, kill 0, fail 3 [DEBUG] child 36 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 36, kill 0, fail 3 [DEBUG] child 37 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 37, kill 0, fail 3 [DEBUG] child 38 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 38, kill 0, fail 3 [DEBUG] child 39 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 39, kill 0, fail 3 [DEBUG] child 40 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 40, kill 0, fail 3 [DEBUG] child 41 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 41, kill 0, fail 3 [DEBUG] child 42 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 42, kill 0, fail 3 [DEBUG] child 43 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 43, kill 0, fail 3 [DEBUG] child 44 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 44, kill 0, fail 3 [DEBUG] child 45 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 45, kill 0, fail 3 [DEBUG] child 46 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 46, kill 0, fail 3 [DEBUG] child 47 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 47, kill 0, fail 3 [DEBUG] child 48 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 48, kill 0, fail 3 [DEBUG] child 49 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 49, kill 0, fail 3 [DEBUG] child 50 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 50, kill 0, fail 3 [DEBUG] child 51 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 51, kill 0, fail 3 [DEBUG] child 52 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 52, kill 0, fail 3 [DEBUG] child 53 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 53, kill 0, fail 3 [DEBUG] child 54 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 54, kill 0, fail 3 [DEBUG] child 55 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 55, kill 0, fail 3 [DEBUG] child 56 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 56, kill 0, fail 3 [DEBUG] child 57 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 57, kill 0, fail 3 [DEBUG] child 58 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 58, kill 0, fail 3 [DEBUG] child 59 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 59, kill 0, fail 3 [DEBUG] child 60 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 60, kill 0, fail 3 [DEBUG] child 61 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 61, kill 0, fail 3 [DEBUG] child 62 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 62, kill 0, fail 3 [DEBUG] child 63 got target -1 selected [DEBUG] hydra_select_target() reports no more targets left [DEBUG] head_no 63, kill 0, fail 3 [DEBUG] head_no[0] read n [DEBUG] send_next_pair_init target 0, head 0, redo 0, redo_state 0, pass_state 0. loop_mode 0, curlogin (null), curpass (null), tlogin test, tpass test, logincnt 0/1, passcnt 0/1, loop_cnt 1 [DEBUG] send_next_pair_mid done 1, pass_state 0, clogin test, cpass test, tlogin -p, tpass test, redo 0 [ATTEMPT] target ... - login "test" - pass "test" - 1 of 1 [child 0] (0/0) DEBUG_CONNECT_OK [VERBOSE] SSL negotiated cipher: ECDHE-RSA-AES256-GCM-SHA384 C:GET / HTTP/1.1 Host: ... Connection: close Authorization: Basic dGVzdDp0ZXN0 User-Agent: Mozilla/4.0 (Hydra)

[DEBUG] SEND [pid:2061] (128 bytes): 0000: 4745 5420 2f20 4854 5450 2f31 2e31 0d0a [ GET / HTTP/1.1.. ] 0010: 486f 7374 3a20 3230 322e 3138 332e 3232 [ Host: .. ] 0020: 352e 3130 320d 0a43 6f6e 6e65 6374 696f [ 5.102..Connectio ] 0030: 6e3a 2063 6c6f 7365 0d0a 4175 7468 6f72 [ n: close..Author ] 0040: 697a 6174 696f 6e3a 2042 6173 6963 2064 [ ization: Basic d ] 0050: 4756 7a64 4470 305a 584e 300d 0a55 7365 [ GVzdDp0ZXN0..Use ] 0060: 722d 4167 656e 743a 204d 6f7a 696c 6c61 [ r-Agent: Mozilla ] 0070: 2f34 2e30 2028 4879 6472 6129 0d0a 0d0a [ /4.0 (Hydra).... ] [DEBUG] hydra_receive_line: waittime: 32, conwait: 0, socket: 5, pid: 2061 [DEBUG] RECV [pid:2061] (4124 bytes): 0000: 4854 5450 2f31 2e31 2032 3030 204f 4b0d [ HTTP/1.1 200 OK. ] 0010: 0a53 6574 2d43 6f6f 6b69 653a 2054 5241 [ .Set-Cookie: TRA ] 0020: 434b 4944 3d39 6336 6531 3935 3630 3639 [ CKID=***** ] 0030: 3932 6363 3562 3238 6532 6632 3633 3563 [ **** ] 0040: 6530 3934 303b 2050 6174 683d 2f3b 2056 [ *; Path=/; V ] 0050: 6572 7369 6f6e 3d31 0d0a 436f 6e74 656e [ ersion=1..Conten ] 0060: 742d 5479 7065 3a20 7465 7874 2f68 746d [ t-Type: text/htm ] 0070: 6c0d 0a41 6363 6570 742d 5261 6e67 6573 [ l..Accept-Ranges ] 0080: 3a20 6279 7465 730d 0a45 5461 673a 2022 [ : bytes..ETag: " ] 0090: 3130 3434 3036 3931 3239 220d 0a4c 6173 [ 1044069129"..Las ] 00a0: 742d 4d6f 6469 6669 6564 3a20 5475 652c [ t-Modified: Tue, ] 00b0: 2030 3520 4d61 7920 3230 3135 2030 373a [ 05 May 2015 07: ] 00c0: 3031 3a34 3620 474d 540d 0a43 6f6e 7465 [ 01:46 GMT..Conte ] 00d0: 6e74 2d4c 656e 6774 683a 2033 3831 360d [ nt-Length: 3816. ] 00e0: 0a43 6f6e 6e65 6374 696f 6e3a 2063 6c6f [ .Connection: clo ] 00f0: 7365 0d0a 4461 7465 3a20 5361 742c 2031 [ se..Date: Sat, 1 ] 0100: 3820 4665 6220 3230 3137 2032 333a 3039 [ 8 Feb 2017 23:09 ] 0110: 3a33 3020 474d 540d 0a53 6572 7665 723a [ :30 GMT..Server: ] 0120: 206c 6967 6874 7470 642f 312e 342e 3239 [ lighttpd/1.4.29 ] 0130: 0d0a 0d0a 3c21 444f 4354 5950 4520 6874 [ ....<!DOCTYPE ht ] 0140: 6d6c 3e0a 3c21 2d2d 0a20 2a20 4465 7363 [ ml>.. ] 01a0: 3c68 746d 6c3e 0a3c 6865 6164 3e0a 2020 [ .. ] 01b0: 2020 3c74 6974 6c65 206c 6f63 616c 653d [ <title locale= ] 01c0: 224c 414e 4735 3833 223e 4465 7669 6365 [ "LANG583">Device ] 01d0: 2043 6f6e 6669 6775 7261 7469 6f6e 3c2f [ Configuration</ ] 01e0: 7469 746c 653e 0a20 2020 203c 6d65 7461 [ title>. <meta ] 01f0: 2068 7474 702d 6571 7569 763d 2243 6f6e [ http-equiv="Con ] 0200: 7465 6e74 2d54 7970 6522 2063 6f6e 7465 [ tent-Type" conte ] 0210: 6e74 3d22 7465 7874 2f68 746d 6c3b 6368 [ nt="text/html;ch ] 0220: 6172 7365 743d 5554 462d 3822 202f 3e0a [ arset=UTF-8" />. ] 0230: 2020 2020 3c6d 6574 6120 6874 7470 2d65 [ <meta http-e ] 0240: 7175 6976 3d22 582d 5541 2d43 6f6d 7061 [ quiv="X-UA-Compa ] 0250: 7469 626c 6522 2063 6f6e 7465 6e74 3d22 [ tible" content=" ] 0260: 4945 3d31 3022 202f 3e0a 2020 2020 3c6d [ IE=10" />. <m ] 0270: 6574 6120 6874 7470 2d65 7175 6976 3d22 [ eta http-equiv=" ] 0280: 5072 6167 6d61 2220 636f 6e74 656e 743d [ Pragma" content= ] 0290: 226e 6f2d 6361 6368 6522 202f 3e0a 2020 [ "no-cache" />. ] 02a0: 2020 3c6d 6574 6120 6874 7470 2d65 7175 [ <meta http-equ ] 02b0: 6976 3d22 4361 6368 652d 436f 6e74 726f [ iv="Cache-Contro ] 02c0: 6c22 2063 6f6e 7465 6e74 3d22 6e6f 2d63 [ l" content="no-c ] 02d0: 6163 6865 2220 2f3e 0a20 2020 203c 6d65 [ ache" />. <me ] 02e0: 7461 2068 7474 702d 6571 7569 763d 2245 [ ta http-equiv="E ] 02f0: 7870 6972 6573 2220 636f 6e74 656e 743d [ xpires" content= ] 0300: 2230 2220 2f3e 0a20 2020 203c 6c69 6e6b [ "0" />. <link ] 0310: 2072 656c 3d22 7368 6f72 7463 7574 2069 [ rel="shortcut i ] 0320: 636f 6e22 2068 7265 663d 2269 6d61 6765 [ con" href="image ] 0330: 732f 6661 7669 636f 6e2e 6963 6f22 202f [ s/favicon.ico" / ] 0340: 3e0a 2020 2020 3c6c 696e 6b20 6872 6566 [ >. <link href ] 0350: 3d22 7374 796c 6573 6865 6574 5f31 5f30 [ ="stylesheet_1_0 ] 0360: 5f39 5f32 352f 6366 6762 6173 6963 2e63 [ _9_25/cfgbasic.c ] 0370: 7373 2220 6d65 6469 613d 2261 6c6c 2220 [ ss" media="all" ] 0380: 7265 6c3d 2253 7479 6c65 7368 6565 7422 [ rel="Stylesheet" ] 0390: 2074 7970 653d 2274 6578 742f 6373 7322 [ type="text/css" ] 03a0: 202f 3e0a 2020 2020 3c6c 696e 6b20 6872 [ />. <link hr ] 03b0: 6566 3d22 7374 796c 6573 6865 6574 5f31 [ ef="stylesheet_1 ] 03c0: 5f30 5f39 5f32 352f 6a71 7565 7279 2e71 [ _0_9_25/jquery.q ] 03d0: 7469 702e 6373 7322 206d 6564 6961 3d22 [ tip.css" media=" ] 03e0: 616c 6c22 2072 656c 3d22 5374 796c 6573 [ all" rel="Styles ] 03f0: 6865 6574 2220 7479 7065 3d22 7465 7874 [ heet" type="text ] 0400: 2f63 7373 2220 2f3e 0a20 2020 203c 6c69 [ /css" />. <li ] 0410: 6e6b 2068 7265 663d 2273 7479 6c65 7368 [ nk href="stylesh ] 0420: 6565 745f 315f 305f 395f 3235 2f6d 6f64 [ eet_1_0_9_25/mod ] 0430: 756c 654d 656e 7543 7275 6d62 732e 6373 [ uleMenuCrumbs.cs ] 0440: 7322 206d 6564 6961 3d22 616c 6c22 2072 [ s" media="all" r ] 0450: 656c 3d22 5374 796c 6573 6865 6574 2220 [ el="Stylesheet" ] 0460: 7479 7065 3d22 7465 7874 2f63 7373 2220 [ type="text/css" ] 0470: 2f3e 0a20 2020 203c 6c69 6e6b 2068 7265 [ />. <link hre ] 0480: 663d 2273 7479 6c65 7368 6565 745f 315f [ f="stylesheet1 ] 0490: 305f 395f 3235 2f72 6564 6d6f 6e64 2f6a [ 0_9_25/redmond/j ] 04a0: 7175 6572 792d 7569 2e63 7373 2220 6d65 [ query-ui.css" me ] 04b0: 6469 613d 2261 6c6c 2220 7265 6c3d 2253 [ dia="all" rel="S ] 04c0: 7479 6c65 7368 6565 7422 2074 7970 653d [ tylesheet" type= ] 04d0: 2274 6578 742f 6373 7322 202f 3e0a 2020 [ "text/css" />. ] 04e0: 2020 3c6c 696e 6b20 6872 6566 3d22 7374 [ <link href="st ] 04f0: 796c 6573 6865 6574 5f31 5f30 5f39 5f32 [ ylesheet_1_0_9_2 ] 0500: 352f 6469 616c 6f67 2e63 7373 2220 6d65 [ 5/dialog.css" me ] 0510: 6469 613d 2261 6c6c 2220 7265 6c3d 2253 [ dia="all" rel="S ] 0520: 7479 6c65 7368 6565 7422 2074 7970 653d [ tylesheet" type= ] 0530: 2274 6578 742f 6373 7322 202f 3e0a 2020 [ "text/css" />. ] 0540: 2020 3c73 7479 6c65 2074 7970 653d 2274 [ .</ ] 0650: 6865 6164 3e0a 3c62 6f64 7920 746f 706d [ head>.<body topm ] 0660: 6172 6769 6e3d 2231 2220 6c65 6674 6d61 [ argin="1" leftma ] 0670: 7267 696e 3d22 3222 2073 7479 6c65 3d22 [ rgin="2" style=" ] 0680: 6f76 6572 666c 6f77 2d79 3a20 6869 6464 [ overflow-y: hidd ] 0690: 656e 3b20 6d69 6e2d 7769 6474 683a 2031 [ en; min-width: 1 ] 06a0: 3035 3770 783b 2220 6f6e 7365 6c65 6374 [ 057px;" onselect ] 06b0: 7374 6172 743d 2272 6574 7572 6e20 6661 [ start="return fa ] 06c0: 6c73 653b 223e 0a20 2020 203c 6966 7261 [ lse;">. <ifra ] 06d0: 6d65 206d 6172 6769 6e68 6569 6768 743d [ me marginheight= ] 06e0: 2230 2220 6d61 7267 696e 7769 6474 683d [ "0" marginwidth= ] 06f0: 2230 2220 6964 3d22 6672 616d 6543 6f6e [ "0" id="frameCon ] 0700: 7461 696e 6572 2220 6e61 6d65 3d22 6672 [ tainer" name="fr ] 0710: 616d 6543 6f6e 7461 696e 6572 2220 6672 [ ameContainer" fr ] 0720: 616d 6562 6f72 6465 723d 2230 2220 7363 [ ameborder="0" sc ] 0730: 726f 6c6c 696e 673d 2261 7574 6f22 2077 [ rolling="auto" w ] 0740: 6964 7468 3d22 3130 3025 2220 6865 6967 [ idth="100%" heig ] 0750: 6874 3d22 3130 3025 2220 7374 796c 653d [ ht="100%" style= ] 0760: 2264 6973 706c 6179 3a6e 6f6e 653b 223e [ "display:none;"> ] 0770: 3c2f 6966 7261 6d65 3e0a 2020 2020 3c64 [ . <d ] 0780: 6976 2069 643d 226e 6f52 6573 706f 6e73 [ iv id="noRespons ] 0790: 6546 726f 6d53 6572 7665 7222 2073 7479 [ eFromServer" sty ] 07a0: 6c65 3d22 6469 7370 6c61 793a 206e 6f6e [ le="display: non ] 07b0: 653b 2077 6964 7468 3a20 3130 3025 3b20 [ e; width: 100%; ] 07c0: 6865 6967 6874 3a20 3130 3025 3b22 3e0a [ height: 100%;">. ] 07d0: 2020 2020 2020 2020 436f 756c 6420 6e6f [ Could no ] 07e0: 7420 636f 6e6e 6563 7420 746f 2053 6572 [ t connect to Ser ] 07f0: 7665 720a 2020 2020 2020 2020 3c64 6976 [ ver. <div ] 0800: 2073 7479 6c65 3d27 6d61 7267 696e 2d74 [ style='margin-t ] 0810: 6f70 3a20 3230 7078 273e 0a20 2020 2020 [ op: 20px'>. ] 0820: 2020 2020 2020 203c 7370 616e 2063 6c61 [ <span cla ] 0830: 7373 3d27 6275 7474 6f6e 5f72 6574 7279 [ ss='button_retry ] 0840: 273e 5265 7472 7920 3c2f 7370 616e 3e0a [ '>Retry . ] 0850: 2020 2020 2020 2020 2020 2020 3c64 6976 [ <div ] 0860: 3e3c 2f64 6976 3e0a 2020 2020 2020 2020 [ >

[vanhauser-thc]

Nowhere in the output you posted I find hydra reporting the SSL error your reported ("SEC_ERROR_UNKNOWN_ISSUER").

hydra works fine against the target.

if you use the form module you must know what you are doing a this is tricky to get configured right.

[nohope91]

Good news, that's all I wanted to know from the beginning (hydra works fine against the target) So as I thought it's in the syntax, I was in doubt because I thought that I configured the syntax perfectly, it's the first form I fail against xD I will give it another try maybe, but I don't mind that much :) I'm VERY GRATEFUL for your time, you know when you give someone your time, you are giving a portion of your life that you'll never get back. I really don't know how to thank you Sir <3

[vanhauser-thc]

you are welcome