[Shadowwiper]

Hello dear members,

I am trying to use hydra to get credentials for ssh to my home router. I know the the credentials but just want to check how hydra works. I created a passwordlist containing my ssh password as well. When I try to use hydra it gives false positive. What is the reason? Please note that I can use hydra as expected because followed exactly the instructions. Does anyone know the reason it gives false positives?

[DramaKing]

Hello dear members,

I am trying to use hydra to get credentials for ssh to my home router. I know the the credentials but just want to check how hydra works. I created a passwordlist containing my ssh password as well. When I try to use hydra it gives false positive. What is the reason? Please note that I can use hydra as expected because followed exactly the instructions. Does anyone know the reason it gives false positives?

Does the password actually work if you just use ssh? Home routers are not known for SSH access.

[Shadowwiper]

Yes just using ssh from my PC or mobile to router using my ssh credentials work and I get a shell in the router that I can run commands. When trying hydra it does not work.

[DramaKing]

Yes just using ssh from my PC or mobile to router using my ssh credentials work and I get a shell in the router that I can run commands. When trying hydra it does not work.

Post the command.

[myusernameismyusernameis]

also make sure you provide password file (-P argument) and not just password (-p argument).

[Shadowwiper]

hydra -l admin -P pass.txt 192.168.0.1 ssh -t 4

[DramaKing]

hydra -l admin -P pass.txt 192.168.0.1 ssh -t 4

It must be something with the server config that Hydra doesn't like.

[Shadowwiper]

Ok thanks for clarification. I will try to check the ssh server configuration since it is embedded Linux os that router runs. I will also try to download hydra standalone static binary and check may be something wrong with default Kali hydra. I also tried to remove whitespces from passwordlist because I found on the net that whitespaces giving false answers but no luck. It seems it gives correct password on the first password on the list. When I arrange the wordlist password also changes may be something with server response as you mentioned hydra thinks that it found the password

[Bastille]

hydra -l admin -P pass.txt 192.168.0.1 ssh -t 4

When you encounter issues feel free to use verbose mode, mode of the time it’s the following parameter « -v » this will give you info during the execution of the command

You can also use « -vV »

[Shadowwiper]

When you encounter issues feel free to use verbose mode, mode of the time it’s the following parameter « -v » this will give you info during the execution of the command

You can also use « -vV »

Good suggestion thanks. I tried it but it did not give any error that help me to find the issue.