hydra

Parallelized login cracker which supports numerous protocols to attack. It is very fast and flexible, and new modules are easy to add. This tool makes it possible for researchers and security consultants to show how easy it would be to gain unauthorized access to a system remotely.

Name:hydra

Category:Passwords

Publisher:trickest-mhmdiaa

Created:7/14/2023

Container:quay.io/trickest/thchydra:93abd60-patch-3

Output Type:

License:Unknown

Source:View Source

Parameters

ipv4 · boolean

-4use IPv4 addresses (default)

ipv6 · boolean

-6use IPv6 addresses (put always in [] also in servers-to-attack)

port · string

-sif the service is on a different default port, define it here

debug · boolean

-ddebug mode

login · string

-llogin with login name

quiet · boolean

-qdo not print messages about connection errors

logins · file · required

-Lload several logins from file

server · string

the target: DNS, IP or 192.168.0.0/24 (this OR the servers-to-attack option)

old-ssl · boolean

-Ouse old SSL v2 and v3

servers · file · required

-MList of servers to attack, one entry per line, ':' to specify port

service · string · required

the service to crack. Supported: adam6500 asterisk cisco cisco-enable cvs ftp[s] http[s]-{head|get|post} http[s]-{get|post}-form http-proxy http-proxy-urlenum icq imap[s] irc ldap2[s] ldap3[-{cram|digest}md5][s] mssql mysql(v4) nntp oracle-listener oracle-sid pcanywhere pcnfs pop3[s] redis rexec rlogin rpcap rsh rtsp s7-300 sip smb smtp[s] smtp-enum snmp socks5 ssh sshkey teamspeak telnet[s] vmauthd vnc xmpp

verbose · boolean

-vverbose mode

password · string

-ptry password

passwords · file · required

-Pload several passwords from FILE

exit-found · boolean

-fexit when a login/pass pair is found per host

pass-gen-nsr · string

-etry n null password, s login as pass and/or r reversed login

output-format · string

-boutput format: text(default), json, jsonv1

threads-global · string

-Trun a number of connects in parallel overall (default: 64)

login-pass-file · file

-Ccolon separated login:pass format, instead of usernames/passwords files

pass-generation · string

-xMIN:MAX:CHARSET password bruteforce generation. e.g 5:8:A1 generate passwords from length 5 to 8 with uppercase characters and numbers

show-login-pass · boolean

-Vshow login+pass for each attempt

dont-redo-failed · boolean

-Kdo not redo failed attempts (good for servers-to-attack mass scanning)

exit-found-global · boolean

-Fexit when any login/pass pair is found globally

loop-arround-users · string

-uloop around users, not passwords (effective! implied with -x)

threads-per-target · string

-tRun a number of connects in parallel per target (default: 16)

pass-gen-non-random · boolean

-ruse a non-random shuffling method for option -x

perform-ssl-connect · boolean

-Sperform an SSL connect

wait-time-per-login · string

-cwait time per login attempt over all threads (enforces threads-per-target: 1)

wait-time-for-response · string

-wwait time for a response (default: 32)

pass-gen-disable-symbols · boolean

-ydisable use of symbols in bruteforce

wait-time-between-connects · string

-Wwait time between connects per thread (default: 0)