THC-Hydra rocks, it’s pretty much the most up to date and currently developed password brute forcing tool around at the moment.
It supports a LOT of services and protocols too.
Number one of the biggest security holes are passwords, as every password security study shows. Hydra is a parallelized login cracker which supports numerous protocols to attack. New modules are easy to add, beside that, it is flexible and very fast.
There are already several login hacker tools available, however none does either support more than one protocol to attack or support parallelized connects.
Currently this tool supports:
TELNET, FTP, HTTP-GET, HTTP-HEAD, HTTPS-GET, HTTP-HEAD, HTTP-PROXY, LDAP2,
LADP3, SMB, SMBNT, MS-SQL, MYSQL, POSTGRES, REXEC, SOCKS5, VNC, POP3, IMAP,
NNTP, PCNFS, ICQ, SAP/R3, Cisco auth, Cisco enable, SMTP-AUTH, SSH2, SNMP,
CVS, Cisco AAA.
However the module engine for new services is very easy so it won’t take a long time until even more services are supported. Planned are: SSH v1, Oracle and more…
This tool is a proof of concept code, to give researchers and security consultants the possibility to show how easy it would be to gain unauthorized access from remote to a system.
There is a lot more information contained in the README file here.
You can download Hydra here:
Compile and install (./configure; make; make install)
IF you want the windows version you can grab this Cygwin version:
More info is available here:
Ubuntu and Debian users have the pre-compiled packages here:
http://blog.goukihq.org/2006/07/28/the-hackers-choice-hydra-on-ubuntu/
Gouki: Thanks that’ll be useful!
Can someone tell me what i did wrong with the login file? I put hydra -L /matt/documents and setting/logins.txt -Anyone got an example to share or can someone provide some help? Thanks
I need help this wont run and i need a good bruteforcer…When i click on hydra a command prompt shows up then dissapers about .5 seconds later. What am i doing wrong?!?!?!?!?!?!?!??!?!?
i’m having the same problem as The Mysterious Stranger above. anybody know what were doing wrong? thanks
hello,this is a good site for learing crack, thank you all.
i
The Mesterious Stranger
The windows version has maybe no frontend… have you thought about this? the just start you command prompt and run it from there… a list of options should appear…
i ran the command prompt, now what. i typed in ./configure and it says that it is unrecognized or something. please help. thanks.
ummm no exe file?
It’s *nix only, so get Cygwin to run it
yeah figured that out a few minutes ago xD thanks!
Hello,
i tried to download the hydra-5.3-win.zip on
the THC-Hydra homepage, and my anti virus programm detected
a virus, is this normal for the data??
pls help me!
It is very usual for hacking tools to be identified as malware. Considering hacking tools are developed by the hacking community, it would be wise to treat any tool you have acquired with a fair degree of suspicion. If you have the ability, tools and techniques to either examine the source code or monitor what the application is actually doing it would probably be best to avoid attempting to hack altogether until you can.
Additionally, running any hacking tools on your production/ main workstation is a Bad Idea.
ok, thx for your advise!
now i have another problem,
i downloaded cygwin, wrote the command, but it doesn’t work!
what can i do?
You’ll need to give a little more information than that. Any error messages? What do you mean ‘it doesn’t work’?
ok, when i write the command, ” no such file or directory” or “Error: Coudn’t find hydra.exe ” appears.
OK, which error do you get under which circumstances?
Are you running the command from the directory where you extracted the files?
Is your anti-virus blocking access to the files?
You have to store the dll files which comes with the zip package in you x:/cygwin/bin folder and then start it with a dos console.
it’s a downgrade of the dll used in general
the link to download it does not work. Where can you get a copy of it?
Links updated because you’re too retarded to Google for thc-hydra or just go to the homepage..
i have some probleme:
Checking for SAP/R3 (librfc/saprfc.h) …
… NOT found, module sapr3 disabled
any ideas ?!!
Thk’s
ok heres how u fix in windows version DOWNLOAD WINDOWS VERSION NOT 1 WERE I HAVE TO DO CONFIGURE AND THAT CRUD
kk now u go to start>run type cmd hit enter
now cd to where u put the files in
when ur in folder type this hydra -h now u should see bunch of commands so u type hydra (script here)
“coudn
t create signal pipe". whats this?@jeck: are you running the windows version, or are you running it with cygwin… if the second is the case read the following http://www.cygwin.com/ml/cygwin/2005-02/msg00286.html
I’m confused as to how this program works. Does it enable you to get passwords that have been entered into remote computers?
I can’t downlaod the program. Can anyone upload it on megaupload or rapidshare ? thx
I don’t speak english very well
@Cosso, if you can’t managee to download the program, you shouldn’t be using it!