2010
10.12

The number one biggest security hole is passwords, as every password security study shows. Hydra is a parallelized (multi-threaded) login cracker which supports attacking/cracking numerous protocols. New modules are easy to add, beside that, it is flexible and very fast.

We haven’t mentioned Hydra since way back in 2007 – THC-Hydra – The Fast and Flexible Network Login Hacking Tool. Currently this tool supports:

TELNET, FTP, HTTP, HTTPS, HTTP-PROXY, SMB, SMBNT, MS-SQL, MYSQL, REXEC,RSH, RLOGIN, CVS, SNMP, SMTP-AUTH, SOCKS5, VNC, POP3, IMAP, NNTP, PCNFS, ICQ, SAP/R3, LDAP2, LDAP3, Postgres, Teamspeak, Cisco auth, Cisco enable, AFP, LDAP2, Cisco AAA (incorporated in telnet module).

Recent changes for v5.8

Added Apple Filing Protocol (thank to “never tired” David Maciejak @ gmail dot com)Fixed a big bug in the SSL option (-S)

Additions prior to public release (v5.7 and before)

Added ncp support plus minor fixes (by David Maciejak @ GMAIL dot com)Added an old patch to fix a memory from SSL and speed it up too from kan(at)dcit.czRemoved unnecessary compiler warningsEnhanced the SSH2 module based on an old patch from aris(at)0xbadc0de.beFixed small local defined overflow in the teamspeak module. Does it still work anyway??Moved to GPLv3 License (lots of people wanted that)Upgraded ssh2 module to libssh-0.4.x (thanks to aris (at) 0xbadc0de.be for the 0.2 basis)Added firebird support (by David Maciejak @ GMAIL dot com)Added SIP MD5 auth patch (by Jean-Baptiste Aviat jba [at] hsc [dot] `french tld’)Removed Palm and ARM supportFix for cygwin which falsely detected postgres library when there was none.

You can download Hydra v5.8

1 comment so far

Add Your Comment
  1. Excellent article, plenty of good quality info. I am going to point out to my friend and ask them the things they think.

You must be logged in to post a comment.