+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Hacking Tools and Programs (https://hackforums.net/forumdisplay.php?fid=10)
+---- Thread: How do you brute SSH? (/showthread.php?tid=6293056)
How do you brute SSH? - spylock - Feb 23, 2025
Hello everyone! Tell me please which soft do you use for Brute-force attacks to SSH servers now?
RE: How do you brute SSH? - OtterBot - Feb 23, 2025
(Feb 23, 2025 01:34 PM)spylock Wrote: Hello everyone! Tell me please which soft do you use for Brute-force attacks to SSH servers now?
Hydra is solid: https://github.com/vanhauser-thc/thc-hydra
RE: How do you brute SSH? - spylock - Feb 23, 2025
(Feb 23, 2025 01:38 PM)OtterBot Wrote: Hydra is solid:
Hydra is too slow
RE: How do you brute SSH? - OtterBot - Feb 23, 2025
(Feb 23, 2025 01:49 PM)spylock Wrote: Hydra is too slow
If you're looking for speed Ncrack: https://github.com/nmap/ncrack
It's not as feature packed as say something like Patator or Medusa but Ncrack is fast.
RE: How do you brute SSH? - DramaKing - Feb 23, 2025
(Feb 23, 2025 01:49 PM)spylock Wrote: Hydra is too slow
No, SSH is rate-limited. You're meant to be bruteforcing it forever.
RE: How do you brute SSH? - AlfredGeeks - Feb 24, 2025
dskjfhger8o7 yurf78963er454yt yuiwhgr7834
RE: How do you brute SSH? - holofernes - Feb 25, 2025
(Feb 23, 2025 01:49 PM)spylock Wrote: Hydra is too slow
You will be rate limited or IP banned if they set up SSH security correctly. If you want more speed, you need to pay for bots/cloud-computers/make your own SSH bruteforce network to speed it up. If it's just your personal laptop doing the brute forcing then be prepared to be dead before it finishes.
RE: How do you brute SSH? - blindcat - Feb 26, 2025
Brute force is not an effective way of hacking a server, for many reasons:
1. It's slow
2. The server can be using something like fail2ban, which will slow you down even more
3. Some firewalls can also rate limit or ban your connections
4. Any reasonable sysadmin uses pubickey authentication. Or, even better, publickey+password. In both cases, you can do nothing
Better find any security vulnerability, either on the SSH server (some versions of OpenSSH are vulnerable) or some other server application.
RE: How do you brute SSH? - Laxir - Mar 26, 2025
You can use crowbar brute forcing tool
RE: How do you brute SSH? - BrothaMike - Mar 26, 2025
Hmm this might be a challange I'll take :)