Tools Required: Burp suite (https://portswigger.net/burp/freedownload)
Setup firefox to use burp
https://support.portswigger.net/customer/portal/articles/1783066-configuring-firefox-to-work-with-burp
1) See the hint on the page at the bottom.
2) Google filetype:lst password
download the aircrack-ng password file
3) In burp find your post request
4) Right click and send to intruder and choose battering ram and hightlight the test password you used.
5) load the password file you downloaded earlier
6) start the attack until you see a change of the length of the response.
7) Check the response and you should be all good
No comments:
Post a Comment