sec-pentesting-toolkit/Other_Hackings/Password_cracking.md
2015-07-04 16:49:27 -07:00

425 B

Password

Brute-force password cracking with Hydra

  1. Download Hydra and install it:
$ ./configure
$ make
$ make install
  1. Check with Burp what's the auth type (e.g. use FoxyProxy to proxy to localhost:8080 so burp can intercept it).

  2. Run hydra with wordlists (and username lists). Example:

$ hydra -l <username> -P <password-list> -V <server> <service>