This project aims to be a wordlist mutator with hormones, which means that some
mutations will be applied to the result of the ones that have been already done,
resulting in something like:


corporation -> C0rp0r4t10n_2012

This software is usefull when applied to a few words, like company name and/or
domain name targeted or the usernames of the system administrators. You must
think that the number of wrds resulting of applying all mutations is exponential
: a 1 word input would generate an output of 1200 words; a 4 words input would
generate an output of 4800 words.

The actual mutations supported are:
* Case mutations (toUpper, toLower, FirstCharUpper, SwapCase)
* T0 l33t mutation
* Add Special Char mutation
* Append String of a predefined list
* Append Date

Some mutations are strange, and some of them have no sense applied together,
like *_strings and add_year, but is your decision, for that exists the
parameters xDDD

The mutations "prepend_string" is commented becouse IMHO have no sense xD and
is rare find passwords like this but feel free to uncommented it, and don't
forget uncomment it in mutator.h too

Syntax: mutator [options] wordlist

Options:
-v, --version       Show version information
-h, --help         Show this help
-o, --output [file] File to write the results
-f, --file [file]* File from read the words
-w, --word [word]* Word to mutate
-b, --basic         Only "case" and "l33t" mutations
-a, --advanced     Only advanced mutations
-y, --years=[year] No append,prepend year, if a year is specified appendrange between year specified and actual year, you can specified a range as well [year-year]
-x, --specials     No append specials chars
-s, --strings       No append,prepend hardcoded strings

One of these options -w or -f is required

Use Case:

$ ./mutator -w company -o company.dic

$ for i in $(cat user.dic);do ./mutator -w $i -o $i.dic; done

Changes

• v0.8 : Language support for French, German, and Spanish; available in HELP menu.
• v0.7 : Customizable 'leetspeak' case mutations.
• v0.6 : Paste (Ctrl+V) in the EDIT menu; various bug fixes.
• v0.5 : Corrected case bugs.
• v0.4 : Fixed RICHTX32.OCX error; Removed RichTextControl from project -- replaced with built-in Microsoft Word API's for .doc files.
• v0.3 : New 'phone number' generation option; Generate based on charset; Two new cases; Split files every # of items.
• v0.2 : 'Analyzer' option; Fixed bugs; More help documentation.
• v0.1 : First public release

INTRODUCCIÓN:

Hydra es una herramienta de fuerza bruta que puede ser usada para los siguientes protocolos:

afp cisco cisco-enable cvs firebird ftp http-get http-head http-proxy https-get https-head

https-form-get https-form-post icq imap imap-ntlm ldap2 ldap3 mssql mysql ncp nntp

oracle-listener pcanywhere pcnfs pop3 pop3-ntlm postgres rexec rlogin rsh sapr3 sip

smb smbnt smtp-auth smtp-auth-ntlm snmp socks5 ssh2 svn teamspeak telnet vmauthd vnc

UBICACIÓN:

xHydra se encuentra disponible en la suite de BackTrack y se ubica en: BackTrack - Privilege Escalation - Password Attacks - Online Attacks - Hydra-gtk.


EJEMPLOS:

• Usar "Single Target" para especificar un host único.
• Usar "Target List" para especificar un archivo que contiene una lista de hosts.
• Eventualmente utilizar "Port" para especificar el puerto para atacar (si no estándar).
• Seleccione el protocolo en el "Protocol" en la lista desplegable.

• http-proxy module: URL para conectarse a través del proxy.
• http / https url: URL protegida a la que desea acceder.
• Cisco Enable, Login for Cisco device: contraseña para el dispositivo de Cisco.
• LDAP DN: el DN Scope de LDAP para la autenticacion.
• sapr3 client id: identificación del cliente que quieres atacar (entre 1 y 99).
• CVS/SVN Repository: directorio de la CVS o SVN.
• Telnet - Successful Login String: introduzca la cadena de retorno para un login exitoso.
• SNMP: seleccionar las opciones por default.