THC Hydra: Network Authentication cracking tool that supports multiple services (1)

Hydra is an open-source brute-force cracking tool of thc, a famous hacker organization. It has versions on multiple windows and linux platforms. It can quickly launch Dictionary Attacks on systems requiring network logon, including FTP, POP3, IMAP, Netbios, Telnet, HTTP Auth, ldap nntp, VNC, ICQ, Socks5, and PCNFS!

Download link: http://down.51cto.com/data/146319

> Go to the treasure chest of network security tools and check out other security tools.

Usage:

Hydra optional parameter + required parameter + attack address + attack type

Syntax:

Hydra [[[-l LOGIN |-l file] [-p PASS |-p file] | [-c file] [-e ns] [-O FILE] [-t TASKS] [-m file [-t tasks] [-w TIME] [-f] [-s PORT] [-S] [- vV] Server service [OPT]

Parameter List:

-R: resumes the last stopped cracking progress and continues cracking. -S use SSL connection -S PORT if the service is on a different default port, define it here -S port number here, you can customize the port number to be cracked (replace the default port) -L LOGIN or-l file login with LOGIN name, or load several logins from FILE -L logon name or-L dictionary logon name or retrieve the logon list from the dictionary -P PASS or-p file try password PASS, or load several passwords from FILE -P password or-P dictionary: Use a single password or retrieve the password list from the dictionary -E ns additional option. n indicates an empty password. s attempts to crack the password. -C file colon seperated "login: pass" format, instead of-L/-P options -The C file uses a colon to separate the format, for example, "Login Name: Password" to replace the-L/-P parameter. -M file server list for parallel attacks, one entry per line -M file server list (TRANSLATOR: ip address list), one row -O FILE write found login/password pairs to FILE instead of stdout -O file writes the found password in the file, instead of outputting it to the screen. -F stop cracking when the first pair of login names or passwords is found after the-M parameter is used -T TASKS run TASKS number of connects in parallel (default: 16) -T scheduled tasks run several tasks at the same time (default value: 16) -W TIME defines the max wait time in seconds for responses (default: 30) -W time defines the timeout time in seconds (default value: 30) -V/-V detailed display of the username or password cracking process Server the target server (use either this OR the-M option)

Server server target (TRANSLATOR: the host on which you want to crack the password) (you can also use the-M parameter to specify)

Two examples:

Service the service to crack. Supported protocols: [Telnet ftp pop3 imap smb smbnt http httpshttp-proxy cisco-enable ldap Mssql mysql nntp vnc socks5 rexec snmp cvs icq pcnfs sapr3 ssh2 smtp-auth] OPT some service modules need special input (see README !) Some service modules of OPT require special syntax input (for details, see 5. Special parameter modules)

Hydra-l login-P/tmp/passlist 192.168.0.1 ftp Login is the username to be cracked, and passlist is the password dictionary library. Hydra-l login-P passfile 192.168.0.1 smb Login is the login name to be cracked, passfile is the password dictionary library, and smb operating system logon password cracking