Hydra syntax help

Hey guys!

I'm Scar and I'm wanting to crack my own router password with Hydra-THC.
I'm using windows 7 and Cyswin. I have a laptop with windows 8.1 ready to go.
What i'm currently trying, with explanation and everything i'm not sure of underlined:


my router's IP is 192.168.5.1
with Tamperdata in firefox i figured out it's https-form-post based
the website is https://192.168.5.1/index.php so i figured i'll only need index.php
After that comes the commands for username / password. I tracked it from the POSTDATA of tamperdata, which says usernamefld and passwordfld so i think i need that.
the POSTDATA also adds login=login at the end, no idea what this is for
Then i added the exact message i get when i make a mistake, i am not sure if this is also what i need to use
this is followed by a random guess that i need to add cookie information at low security that i also got from tamperdata
and then just comes the normal stuff. I'm not sure if the -w 30 is needed or the -o attack.txt

I'd appreciate ANY help i could get on this because it's all pretty new to me. The picture is basically my login screen

Hey GH05T,
I'll be honest; I've never seen a pop-up based login for routers/modems in the Netherlands.. This router specifically uses pfSense, an open source firewall-router software thingie.
I started hydra with a syntax like you said (ping, name, password list, port followed by http-get / ) however that's for a GET based login, and I'm 90% sure mine's a POST based one. This makes things more difficult I think.. This website helped me abit to get on the right track but you need to know quite some variables it seems.

I am not 100% sure what you mean with 'where' it's posting. I've added a screencap just to be sure Do you mean the server? (lighttpd/1.4.35)
Also I have no idea if it's bruteforce proof tbh, I know it's possible to put some anti-bruteforce protection on it though.

Hej!

I'd LOVE to try out your changes to the code, however it seems it has some nasty kind of protection: I entered like 20 bullshit combinations and now i can't connect to 192.168.5.1 anymore. My phone can however. I tried using a mobile wi-fi hotspot but it wouldn't work either. I think I'll install Cygwin on my laptop when I have the time..