- Looks like HTTP basic auth ![[images/Pasted image 20251130192951.png]] - Try `hydra` with `2023-200_most_used_passwords.txt` - No hits ![[images/Pasted image 20251130193004.png]] - This is using a one-off username - Try `hydra` with `top-usernames-shortlist.txt` and `2023-200_most_used_passwords.txt` - We have a hit! ![[images/Pasted image 20251130193303.png]]