However, if you can also tailor the password list to your use, Hydra can become a very powerful ally.

You can obviously use other programs such as crunch and wordlist generators to tailor your password list to your liking. The problem typically encountered will come in the form of the password list used. Whether you use THC Hydra or Hydra GTK, both are great tools to crack passwords. Click on the download link for the latest version of Hydra and save the TGZ file on your hard drive. Hydra GTK is a lot easier to use than THC Hydra, even though they are the same thing. Open your Internet browser in Cygwin and visit THC.org. You can leave the tuning and specific tabs as is and click on the start button under the start tab. Once these have been filled in, the rest is easy. The location of the password file is inputted in the box called “password list”. For instance, in the “username list”, I would put “/home/kalyani/usernamelist.txt”. In the next tab, input the username you desire or a list of usernames (the location of the list of usernames in this case). The plus point about Hydra is that it can deal with a large number of protocols. The “be verbose” box is equivalent to -v in THC Hydra, while the “show attempts” box is equivalent to -V in THC Hydra. It would be advisable to tick the “be verbose” and the “show attempts” boxes as well. In the target box, you’d put 999.999.999.999, and in the port section, you’d put 22. Suppose you’re attacking a single target, an SSH, located at 999.999.999.999 (a fake IP address, obviously). Username: either input a username or a list of usernamesĭepending on whether you want to hack one or multiple targets, you can either input one or many targets into the target box.Port number: the port number associated with the protocol.It brute forces on services we specify by using user-lists & wordlists. Hydra supports 30+ protocols including their SSL enabled ones. It brute forces various combinations on live services like telnet, ssh, http, https, smb, snmp, smtp etc.

A target or list of targets: This is the IP address of the protocol you wish to attack Hydra (better known as thc-hydra) is an online password attack tool.Once installed, you will need the following:

Thc hydra download