Can someone give a hint please. I’m using Hydra with http-post-form without ^USER^, am I on right way? And some passwords with this params response without “Invalid password!” but there still doesnt works. And I’ll already doing interception with burp, but can’t figure out something unusual, what I need to mentioned?