mirror of
https://github.com/vanhauser-thc/thc-hydra.git
synced 2025-03-12 04:36:23 -07:00
124 lines
4.0 KiB
Groff
124 lines
4.0 KiB
Groff
.TH "HYDRA" "1" "24/05/2012"
|
|
.SH NAME
|
|
hydra \- a very fast network logon cracker which support many different services
|
|
.SH SYNOPSIS
|
|
.B hydra
|
|
[[[\-l LOGIN|\-L FILE] [\-p PASS|\-P FILE|\-x OPT]] | [\-C FILE]] [\-e nsr]
|
|
[\-u] [\-f] [\-F] [\-M FILE] [\-o FILE] [\-t TASKS] [\-w TIME] [\-W TIME]
|
|
[\-m OPTIONS] [\-s PORT] [\-S] [\-4/6] [\-vV] [\-d]
|
|
server service [OPTIONS]
|
|
.br
|
|
.SH DESCRIPTION
|
|
Hydra is a parallized login cracker which supports numerous protocols
|
|
to attack. New modules are easy to add, beside that, it is flexible and
|
|
very fast.
|
|
|
|
This tool gives researchers and security consultants the possiblity to
|
|
show how easy it would be to gain unauthorized access from remote to a
|
|
system.
|
|
|
|
Currently this tool supports:
|
|
AFP, Cisco AAA, Cisco auth, Cisco enable, CVS, Firebird, FTP, FTPS,
|
|
HTTP-FORM-GET, HTTP-FORM-POST, HTTP-GET, HTTP-HEAD, HTTP-PROXY,
|
|
HTTP-PROXY-URLENUM, ICQ, IMAP, IRC, LDAP2, LDAP3, MS-SQL, MYSQL, NCP, NNTP,
|
|
Oracle, Oracle-Listener, Oracle-SID, PC-Anywhere, PCNFS, POP3, POSTGRES,
|
|
RDP, REXEC, RLOGIN, RSH, SAP/R3, SIP, SMB, SMTP, SMTP-Enum, SNMP,
|
|
SOCKS5, SSH(v1 and v2), SSHKEY, Subversion, Teamspeak (TS2), Telnet,
|
|
VMware-Auth, VNC and XMPP.
|
|
For most protocols, SSL mode is available (e.g. https-get, ftp-ssl, etc.)
|
|
If not all necessary libraries are found during compile time, your
|
|
available services will be less. Type "hydra" to see what is available.
|
|
.SH Options
|
|
.TP
|
|
.B target
|
|
a target to attack, can be an IPv4 address, IPv6 address or DNS name.
|
|
.TP
|
|
.B service
|
|
a service to attack, see the list of protocols available
|
|
.TP
|
|
.B OPTIONAL SERVICE PARAMETER
|
|
Some modules have optional or mandatory options. type "hydra \-U <servicename>"
|
|
to get help on on the options of a service.
|
|
.TP
|
|
.B \-R
|
|
restore a previously aborted session. Requires a hydra.restore file was
|
|
written. No other options are allowed when using \-R
|
|
.TP
|
|
.B \-S
|
|
connect via SSL
|
|
.TP
|
|
.B \-s PORT
|
|
if the service is on a different default port, define it here
|
|
.TP
|
|
.B \-l LOGIN
|
|
or \-L FILE login with LOGIN name, or load several logins from FILE
|
|
.TP
|
|
.B \-p PASS
|
|
or \-P FILE try password PASS, or load several passwords from FILE
|
|
.TP
|
|
.B \-x min:max:charset
|
|
generate passwords from min to max length. charset can contain 1
|
|
for numbers, a for lowcase and A for upcase characters.
|
|
Any other character is added is put to the list.
|
|
Example: 1:2:a1%.
|
|
The generated passwords will be of length 1 to 2 and contain
|
|
lowcase letters, numbers and/or percent signs and dots.
|
|
.TP
|
|
.B \-e nsr
|
|
additional checks, "n" for null password, "s" try login as pass, "r" try the reverse login as pass
|
|
.TP
|
|
.B \-C FILE
|
|
colon separated "login:pass" format, instead of \-L/\-P options
|
|
.TP
|
|
.B \-u
|
|
by default Hydra checks all passwords for one login and then tries the next
|
|
login. This option loops around the passwords, so the first password is
|
|
tried on all logins, then the next password.
|
|
.TP
|
|
.B \-f
|
|
exit after the first found login/password pair (per host if \-M)
|
|
.TP
|
|
.B \-F
|
|
exit after the first found login/password pair for any host (for usage with -M)
|
|
.TP
|
|
.B \-M FILE
|
|
server list for parallel attacks, one entry per line
|
|
.TP
|
|
.B \-o FILE
|
|
write found login/password pairs to FILE instead of stdout
|
|
.TP
|
|
.B \-t TASKS
|
|
run TASKS number of connects in parallel (default: 16)
|
|
.TP
|
|
.B \-m OPTIONS
|
|
module specific options. See hydra -U <module> what options are available.
|
|
.TP
|
|
.B \-w TIME
|
|
defines the max wait time in seconds for responses (default: 32)
|
|
.TP
|
|
.B \-W TIME
|
|
defines a wait time between each connection a task performs. This usually
|
|
only makes sense if a low task number is used, .e.g \-t 1
|
|
.TP
|
|
.B \-4 / \-6
|
|
prefer IPv4 (default) or IPv6 addresses
|
|
.TP
|
|
.B \-v / \-V
|
|
verbose mode / show login+pass combination for each attempt
|
|
.B \-d
|
|
debug mode
|
|
.TP
|
|
.B \-h, \-\-help
|
|
Show summary of options.
|
|
.SH SEE ALSO
|
|
.BR xhydra (1),
|
|
.BR pw-inspector (1).
|
|
.br
|
|
The programs are documented fully by van Hauser <vh@thc.org>
|
|
.SH AUTHOR
|
|
hydra was written by van Hauser / THC <vh@thc.org>
|
|
|
|
.PP
|
|
This manual page was written by Daniel Echeverry <epsilon77@gmail.com>,
|
|
for the Debian project (and may be used by others).
|