Hack Tool Repository Logo

Hack Tool Repository

white curve white curve

Hydra

Google
 

Hydra

A very fast network logon cracker which support many different services.

Number one of the biggest security holes are passwords, as every password security study shows. Hydra is a parallized login cracker which supports numerous protocols to attack. New modules are easy to add, beside that, it is flexible and very fast.

Currently this tool supports: TELNET, FTP, HTTP, HTTPS, HTTP-PROXY, SMB, SMBNT, MS-SQL, MYSQL, REXEC, RSH, RLOGIN, CVS, SNMP, SMTP-AUTH, SOCKS5, VNC, POP3, IMAP, NNTP, PCNFS, ICQ, SAP/R3, LDAP2, LDAP3, Postgres, Teamspeak, Cisco auth, Cisco enable, LDAP2, Cisco AAA (incorporated in telnet module).

This tool is a proof of concept code, to give researchers and security consultants the possiblity to show how easy it would be to gain unauthorized access from remote to a system.

 Related to:
APR
apr-util
libssh
subversion


Site: http://freeworld.thc.org/thc-hydra/
Source URL: files/Passwords/Hydra/hydra-5.7-src.tar.gz
Category: Passwords
Hits: 23078
Rating: 10
Added: 2006-08-27 17:13:26
Updated: 2010-06-20 11:48:05
Tested on:
Fedora Core    install.sh
10
11
OpenSUSE    install.sh
10
11
Ubuntu    install.sh
7.10
8.10
9.10

Comments:

To install on Fedora Core 6 including postgresql support you will need the postgresql-devel package. To enable ssh for hydra, you will need to install libssh version 0.11.

by marc at 2007-05-19 15:57:54

If, after compiling and installing hydra, the tool complains with one of the following messages:
hydra: error while loading shared libraries: libpq.so.5: cannot open shared object file: No such file or directory
hydra: error while loading shared libraries: libapr-0.so.0: cannot open shared object file: No such file or directory
hydra: error while loading shared libraries: libssh.so: cannot open shared object file: No such file or directory
hydra: error while loading shared libraries: libaprutil-0.so.0: cannot open shared object file: No such file or directory

Then you will need to create symbolic links to the libraries mentioned in the /usr/lib directory.

by marc at 2007-10-18 17:08:55

if you get the following error building XHydra:

/usr/include/bits/fcntl2.h:51: error: call to "__open_missing_mode" declared with attribute error: open with O_CREAT in second argument needs 3 arguments

You will need to change the following line in hydra-gtk/src/callbacks.c:
fd = open(filename, O_CREAT | O_TRUNC | O_WRONLY);
into:
fd = open(filename, O_CREAT | O_TRUNC | O_WRONLY, 0666);

by marc at 2009-01-30 18:08:53

On Slackware, you will receive an error:
gcc -I. -Wall -O2 -c hydra-svn.c -DLIBOPENSSL -DLIBSVN -I/usr/include/subversion-1 -I/usr/include/subversion-1
In file included from hydra-svn.c:17:
/usr/include/subversion-1/svn_client.h:35:24: error: apr_tables.h: No such file or directory
In file included from /usr/include/subversion-1/svn_client.h:37,
from hydra-svn.c:17:
/usr/include/subversion-1/svn_types.h:28:45: error: apr.h: No such file or directory
/usr/include/subversion-1/svn_types.h:29:23: error: apr_pools.h: No such file or directory
/usr/include/subversion-1/svn_types.h:30:22: error: apr_hash.h: No such file or directory
/usr/include/subversion-1/svn_types.h:32:22: error: apr_time.h: No such file or directory

Install the apache portable runtime (apr and apr-util) version 0.9, subversion and postgresql from source. Since apr installs by default in the /usr/local/apr directory, you will need to adjust the Makefile with the following directories:
XLIBPATHS=/usr/local/apr/lib
XIPATHS=/usr/local/apr/include/apr-1

by marc at 2009-12-29 12:11:02

I received the following error during make on Ubuntu:

gcc -I. -Wall -O2 -c hydra-svn.c -DLIBOPENSSL -DLIBPOSTGRES -DLIBSVN -DLIBSSH -I/usr/local/include -I/usr/local/include -I/usr/local/include/subversion-1 -I/usr/local/include/apr-1
In file included from /usr/local/include/subversion-1/svn_client.h:29,
from hydra-svn.c:17:
/usr/local/include/apr-1/apr.h:285: error: expected â=â, â,â, â;â, âasmâ or â__attribute__â before âapr_off_tâ
In file included from /usr/local/include/apr-1/apr_file_io.h:29,
from /usr/local/include/subversion-1/svn_client.h:34,
from hydra-svn.c:17:
/usr/local/include/apr-1/apr_file_info.h:198: error: expected specifier-qualifier-list before âapr_off_tâ
In file included from /usr/local/include/subversion-1/svn_client.h:34,
from hydra-svn.c:17:
or
error: expected "=", ",", ";", "asm" or "__attribute__" before "apr_off_t"

This is due to the fact that not all options are passed to the compiler. Change the first line in the Makefile file to:

CC=gcc `/usr/local/bin/apr-1-config -cppflags -cflags`

by marc at 2009-12-29 12:15:07

During compilation you might get the following error:

/usr/local/lib64/libcrypto.a(dso_dlfcn.o): In function `dlfcn_globallookup:
dso_dlfcn.c:(.text+0x31): undefined reference to `dlopen
dso_dlfcn.c:(.text+0x44): undefined reference to `dlsym
dso_dlfcn.c:(.text+0x4f): undefined reference to `dlclose
/usr/local/lib64/libcrypto.a(dso_dlfcn.o): In function `dlfcn_pathbyaddr:
dso_dlfcn.c:(.text+0x9e): undefined reference to `dladdr
dso_dlfcn.c:(.text+0x101): undefined reference to `dlerror
/usr/local/lib64/libcrypto.a(dso_dlfcn.o): In function `dlfcn_bind_func:
dso_dlfcn.c:(.text+0x434): undefined reference to `dlsym
dso_dlfcn.c:(.text+0x4db): undefined reference to `dlerror
/usr/local/lib64/libcrypto.a(dso_dlfcn.o): In function `dlfcn_bind_var:
dso_dlfcn.c:(.text+0x554): undefined reference to `dlsym
dso_dlfcn.c:(.text+0x60e): undefined reference to `dlerror
/usr/local/lib64/libcrypto.a(dso_dlfcn.o): In function `dlfcn_unload:
dso_dlfcn.c:(.text+0x66f): undefined reference to `dlclose
/usr/local/lib64/libcrypto.a(dso_dlfcn.o): In function `dlfcn_load:
dso_dlfcn.c:(.text+0x724): undefined reference to `dlopen
dso_dlfcn.c:(.text+0x792): undefined reference to `dlclose
dso_dlfcn.c:(.text+0x7c0): undefined reference to `dlerror
collect2: ld returned 1 exit status
make: *** [hydra] Error 1

Add the following to the XLIBS variable in the Makefile:
XLIBS= -ldl -lssl -lcrypto

by marc at 2010-06-26 08:02:35

 
Olderchurch Web Site About Us | Site Map | Contact Us | ©2007 Olderchurch Security Consultancy