Nexus: THC-Hydra

HOWTO : Install THC-Hydra on Ubuntu 16.04.3 LTS

Read

THC-Hydra is a password brute forcer.

Step 1 :

sudo apt install git build-essential libssl-dev libssh-dev libidn11-dev libpcre3-dev libgtk2.0-dev libmysqlclient-dev libpq-dev libsvn-dev firebird-dev libncurses5-dev

Step 2 :

cd ~

mkdir infosec

cd infosec

git clone https://github.com/vanhauser-thc/thc-hydra.git

cd thc-hydra

./configure

make

./hydra -h

./xhydra

Update and Upgrade

sudo apt update

sudo apt dist-upgrade



cd ~/infosec/thc-hydra

git pull origin master

make clean

./configure

make



That's all!  See you.




Read MoreAdd comment




HOWTO : Install THC-Hydra on Ubuntu 16.04.3 LTS

 
              Reviewed by 0x000216
              on 
              
Friday, September 08, 2017

 
              Rating: 5







        








THC-Hydra 8.1 - Network Logon Cracker




By 0x000216
Read
0 Comments



 A very fast network logon cracker which support many different services.

See feature sets and services coverage page - incl. a speed comparison against ncrack and medusa.Number one of the biggest security holes are passwords, as every password security study shows.

This tool is a proof of concept code, to give researchers and security consultants the possiblity to show how easy it would be to gain unauthorized access from remote to a system.

There are already several login hacker tools available, however none does either support more than one protocol to attack or support parallized connects.

It was tested to compile cleanly on Linux, Windows/Cygwin, Solaris, FreeBSD/OpenBSD, QNX (Blackberry 10) and OSX.

Currently this tool supports the following protocols:
Asterisk, AFP, Cisco AAA, Cisco auth, Cisco enable, CVS, Firebird, FTP,  HTTP-FORM-GET, HTTP-FORM-POST, HTTP-GET, HTTP-HEAD, HTTP-PROXY, HTTPS-FORM-GET,  HTTPS-FORM-POST, HTTPS-GET, HTTPS-HEAD, HTTP-Proxy, ICQ, IMAP, IRC, LDAP,  MS-SQL, MYSQL, NCP, NNTP, Oracle Listener, Oracle SID, Oracle, PC-Anywhere,  PCNFS, POP3, POSTGRES, RDP, Rexec, Rlogin, Rsh, SAP/R3, SIP, SMB, SMTP,  SMTP Enum, SNMP v1+v2+v3, SOCKS5, SSH (v1 and v2), SSHKEY, Subversion,  Teamspeak (TS2), Telnet, VMware-Auth, VNC and XMPP.

CHANGELOG for 8.1
        ! Development moved to a public github repository: https://github.com/vanhauser-thc/thc-hydra
        
        * David Maciejak, my co-maintainer moved to a different job and country and can not help with Hydra anymore - sadly! Wish you all the best!
        * Added patch from Ander Juaristi which adds h/H header options for http-form-*, great work, thanks!
        * Found login:password combinations are now printed with the name specified (hostname or IP), not always IP
        * Fixed the -M option, works now with many many targets :-)
        * -M option now supports ports, add a colon in between: "host:port", or, if IPv6, "[ipv6ipaddress]:port"
        * Fixed for cisco-enable if an intial Login/Password is used (thanks to joswr1te for reporting)
        * Added patch by tux-mind for better MySQL compilation and an Android patches and Makefile. Thanks!
        * Added xhydra gtk patches by Petar Kaleychev to support -h, -U, -f, -F, -q and -e r options, thanks!
        * Added patch for teamspeak to better identify server errors and auth failures (thanks to Petar Kaleychev)
        * Fixed a crash in the cisco module (thanks to Anatoly Mamaev for reporting)
        * Small fix for HTTP form module for redirect pages where a S= string match would not work (thanks to mkosmach for reporting)
        * Updated configure to detect subversion packages on current Cygwin
        * Fixed RDP module to support the port option (thanks to and.enshin(at)gmail.com)


Download THC-Hydra 8.1 



Read MoreAdd comment







THC-Hydra 8.1 - Network Logon Cracker

 
              Reviewed by 0x000216
              on 
              
Monday, December 08, 2014

 
              Rating: 5












        








Hydra Network Logon Cracker 8.0 - Very fast network logon cracker which
support many different services




By 0x000216
Read
0 Comments




A very fast network logon cracker which support many different services.

See feature sets and services coverage page - incl. a speed comparison against ncrack and medusa.Number one of the biggest security holes are passwords, as every password security study shows.

This tool is a proof of concept code, to give researchers and security consultants the possiblity to show how easy it would be to gain unauthorized access from remote to a system.

There are already several login hacker tools available, however none does either support more than one protocol to attack or support parallized connects.

It was tested to compile cleanly on Linux, Windows/Cygwin, Solaris, FreeBSD/OpenBSD, QNX (Blackberry 10) and OSX.

Currently this tool supports the following protocols:
Asterisk, AFP, Cisco AAA, Cisco auth, Cisco enable, CVS, Firebird, FTP,  HTTP-FORM-GET, HTTP-FORM-POST, HTTP-GET, HTTP-HEAD, HTTP-PROXY, HTTPS-FORM-GET,  HTTPS-FORM-POST, HTTPS-GET, HTTPS-HEAD, HTTP-Proxy, ICQ, IMAP, IRC, LDAP,  MS-SQL, MYSQL, NCP, NNTP, Oracle Listener, Oracle SID, Oracle, PC-Anywhere,  PCNFS, POP3, POSTGRES, RDP, Rexec, Rlogin, Rsh, SAP/R3, SIP, SMB, SMTP,  SMTP Enum, SNMP v1+v2+v3, SOCKS5, SSH (v1 and v2), SSHKEY, Subversion,  Teamspeak (TS2), Telnet, VMware-Auth, VNC and XMPP.

Changelog for hydra
-------------------

Release 8.0
! Development moved to a public github repository: https://github.com/vanhauser-thc/thc-hydra
* Added module for redis (submitted by Alejandro Ramos, thanks!)
* Added patch which adds Unicode support for the SMB module (thanks to Max Kosmach)
* Added initial interactive password authentication test for ssh (thanks to Joshua Houghton)
* Added patch for xhydra that adds bruteforce generator to the GUI (thanks to Petar Kaleychev)
* Target on the command line can now be a CIDR definition, e.g. 192.168.0.0/24
* with -M , you can now specify a port for each entry (use "target:port" per line)
* Verified that hydra compiles cleanly on QNX / Blackberry 10 :-)
* Bugfixes for -x option:
  - password tries were lost when connection errors happened (thanks to Vineet Kumar for reporting)
  - fixed crash when used together with -e option 
* Fixed a bug that hydra would not compile without libssh (introduced in v7.6)
* Various bugfixes if many targets where attacked in parallel
* Cygwin's Postgresql is working again, hence configure detection re-enabled
* Added gcc compilation security options (if detected to be supported by configure script)
* Enhancements to the secure compilation options
* Checked code with cppcheck and fixed some minor issues.
* Checked code with Coverity. Fixed a lot of small and medium issues.


Download Hydra Network Logon Cracker 8.0



Read MoreAdd comment







Hydra Network Logon Cracker 8.0 - Very fast network logon cracker which
support many different services

 
              Reviewed by 0x000216
              on 
              
Tuesday, June 03, 2014

 
              Rating: 5












        








Kvasir - Penetration Testing Data Management Tool




By 0x000216
Read
0 Comments




Penetration Testing Data Management can be a nightmware, because well you  generate a LOT of data and some information when conducing a  penetration test, especially using tools – they return lots of actual  and potential vulnerabilitites to review. Port scanners can return  thousands of ports for just a few hosts. How easy is it to share all  this data with your co-workers?
 
Features
That’s what Kvasir is here to help you with. Here’s what you’ll need to get started:
The latest version of web2py
A database (PostgreSQL known to work)
A network vulnerability scanner (Nexpose/Nmap supported)
Additional python libraries
Kvasir is a web2py application and can be installed for each customer or task. 

Tools Supported
At current release, Kvasir directly supports the following tools:
Rapid7 Nexpose Vulnerability Scanner
Nmap Security Scanner
Metasploit Pro (limited support for Express/Framework data)
ShodanHQ
ImmunitySec CANVAS
THC-Hydra
Foofus Medusa
John The Ripper
This design keeps data separated and from you accidentally attacking or reviewing other customers.

This tool was developed primarily for the Cisco Systems Advanced  Services Security Posture Assessment (SPA) team. While not every method  used by the SPA team may directly relate we hope that this tool is  something that can be molded and adapted to fit almost any working  scenario.


Download Kvasir



Read MoreAdd comment







Kvasir - Penetration Testing Data Management Tool

 
              Reviewed by 0x000216
              on 
              
Monday, April 14, 2014

 
              Rating: 5












        








[THC-Hydra v7.6] Fast Parallel Network Logon Cracker




By 0x000216
Read
0 Comments




 Hydra is a parallelized network logon cracker which supports numerous  protocols to attack, new modules are easy to add, beside that, it is  flexible and very fast.

Features
IPv6 Support   
Graphic User Interface   
Internationalized support (RFC 4013)   
HTTP proxy support   
SOCKS proxy support   
The tool supports the following protocols:
Samba, FTP, POP3, IMAP, Telnet, HTTP Auth, LDAP, NNTP, MySQL, VNC, ICQ, Socks5, PCNFS, Cisco and more.

Release 7.6
* Added a wizard script for hydra based on a script by Shivang Desai 
* Added module for Siemens S7-300 (submitted by Alexander Timorin and Sergey Gordeychik, thanks!)
* HTTP HEAD/GET: MD5 digest auth was not working, fixed (thanks to Paul Kenyon)
* SMTP Enum: HELO is now always sent, better 500 error detection
* hydra main:
   - fixed a bug in the IPv6 address parsing when a port was supplied
   - added info message for pop3, imap and smtp protocol usage
* hydra GTK: missed some services, added
* dpl4hydra.sh:
   - added Siemens S7-300 common passwords to default password list
   - more broad searching in the list
* Performed code indention on all C files :-)
* Makefile patch to ensure .../etc directory is there (thanks to vonnyfly)

Download THC-Hydra v7.6



Read MoreAdd comment







[THC-Hydra v7.6] Fast Parallel Network Logon Cracker

 
              Reviewed by 0x000216
              on 
              
Tuesday, January 07, 2014

 
              Rating: 5












        








[THC-Hydra 7.5] Fast Parallel Network Logon Cracker




By 0x000216
Read
0 Comments




Hydra is a parallelized network logon cracker which supports numerous  protocols to attack, new modules are easy to add, beside that, it is  flexible and very fast.

Features
IPv6 Support   
Graphic User Interface   
Internationalized support (RFC 4013)   
HTTP proxy support   
SOCKS proxy support   
The tool supports the following protocols

Asterisk, AFP, Cisco AAA, Cisco auth, Cisco enable, CVS, Firebird, FTP, HTTP-FORM-GET, HTTP-FORM-POST, HTTP-GET, HTTP-HEAD, HTTP-PROXY, HTTPS-FORM-GET, HTTPS-FORM-POST, HTTPS-GET, HTTPS-HEAD, HTTP-Proxy, ICQ, IMAP, IRC, LDAP, MS-SQL, MYSQL, NCP, NNTP, Oracle Listener, Oracle SID, Oracle, PC-Anywhere, PCNFS, POP3, POSTGRES, RDP, Rexec, Rlogin, Rsh, SAP/R3, SIP, SMB, SMTP, SMTP Enum, SNMP v1+v2+v3, SOCKS5, SSH (v1 and v2), SSHKEY, Subversion, Teamspeak (TS2), Telnet, VMware-Auth, VNC and XMPP.


Changelog for 7.5
 Added module for Asterisk Call Manager
 Added support for Android where some functions are not available
 hydra main:
           – reduced the screen output if run without -h, full screen with -h
           – fix for ipv6 and port parsing with service://[ipv6address]:port/OPTIONS
           – fixed -o output (thanks to www417)
           – warning if HYDRA_PROXY is defined but the module does not use it
           – fixed an issue with large input files and long entries
hydra library:
           – SSL connections are now fixed to SSLv3 as some SSL servers fail otherwise, report if this gives you problems
           – removed support for old OPENSSL libraries
HTTP Form module:
           – login and password values are now encoded if special characters are present
           – ^USER^ and ^PASS^ are now also supported in H= header values
           – if you the colon as a value in your option string, you can now escape it with \: – but do not encode a \ with \\
        Mysql module: protocol 10 is now supported
        SMTP, POP3, IMAP modules: Disabled the TLS in default. TLS  must now be defined as an option “TLS” if required. This increases  performance.
        Cisco module: fixed a small bug (thanks to Vitaly McLain)
      Postgres module: libraries on Cygwin are buggy at the moment, module is therefore disabled on Cygwin

Download THC-Hydra 7.5



Read MoreAdd comment







[THC-Hydra 7.5] Fast Parallel Network Logon Cracker

 
              Reviewed by 0x000216
              on 
              
Monday, December 16, 2013

 
              Rating: 5












        








[THC-Hydra v7.5] Fast network logon cracker




By 0x000216
Read
0 Comments




CHANGELOG for 7.5
===================

        * Moved the license from GPLv3 to AGPLv3 (see LICENSE file)
        * Added module for Asterisk Call Manager
        * Added support for Android where some functions are not available
        * hydra main:
           - reduced the screen output if run without -h, full screen with -h
           - fix for ipv6 and port parsing with service://[ipv6address]:port/OPTIONS
           - fixed -o output (thanks to www417)
           - warning if HYDRA_PROXY is defined but the module does not use it
           - fixed an issue with large input files and long entries

        * hydra library:
           - SSL connections are now fixed to SSLv3 as some SSL servers fail otherwise, report if this gives you problems
           - removed support for old OPENSSL libraries
        * HTTP Form module:
           - login and password values are now encoded if special characters are present
           - ^USER^ and ^PASS^ are now also supported in H= header values
           - if you the colon as a value in your option string, you can now escape it with \: - but do not encode a \ with \\
        * Mysql module: protocol 10 is now supported
        * SMTP, POP3, IMAP modules: Disabled the TLS in default. TLS must now be defined as an option "TLS" if required. This increases performance.
        * Cisco module: fixed a small bug (thanks to Vitaly McLain)
        * Postgres module: libraries on Cygwin are buggy at the moment, module is therefore disabled on Cygwin

 You can also take a look at the full CHANGES file

Download THC-Hydra v7.5


1. The source code of state-of-the-art Hydra: hydra-7.5.tar.gz
    (compiles on all UNIX based platforms - even MacOS X, Cygwin on Windows, ARM-Linux, Android, etc.)

 2. The source code of the stable tree of Hydra ONLY in case v7 gives you problems on unusual and old platforms: hydra-5.9.1-src.tar.gz

 3. The Win32/Cywin binary release: --- not anymore ---
    Install cygwin from http://www.cygwin.com  and compile it yourself. If you do not have cygwin installed - how do you think you will do proper securiy testing? duh ...



Read MoreAdd comment







[THC-Hydra v7.5] Fast network logon cracker

 
              Reviewed by 0x000216
              on 
              
Tuesday, August 06, 2013

 
              Rating: 5