I feel like an idiot now. I thought that doing this is kinda ridiculous, maybe I should have tried it.
spoiler
I went beyond my way trying to ssh via torsocks and even tried to reverse the hash, assuming that chap-0+chap-1 token and username/password is the public/private key and vice-versa and hidden input had something to do with it. Even tried the basic auth combination of chap-1:username/password@url.com.
Do it anyway.
spoiler
Onions have many layers. I used a command line tool to “peel” it.
I feel like an idiot now. I thought that doing this is kinda ridiculous, maybe I should have tried it.
spoiler
I went beyond my way trying to
sshviatorsocksand even tried to reverse the hash, assuming thatchap-0+chap-1token andusername/passwordis the public/private key and vice-versa and hidden input had something to do with it. Even tried the basic auth combination ofchap-1:username/password@url.com.