[spylock]

Hello everyone! Tell me please which soft do you use for Brute-force attacks to SSH servers now?

[OtterBot]

Hello everyone! Tell me please which soft do you use for Brute-force attacks to SSH servers now?

Hydra is solid: https://github.com/vanhauser-thc/thc-hydra

[spylock]

Hydra is solid:

Hydra is too slow

[OtterBot]

Hydra is too slow

If you're looking for speed Ncrack: https://github.com/nmap/ncrack

It's not as feature packed as say something like Patator or Medusa but Ncrack is fast.

[DramaKing]

Hydra is too slow

No, SSH is rate-limited. You're meant to be bruteforcing it forever.

[AlfredGeeks]

dskjfhger8o7 yurf78963er454yt yuiwhgr7834

[holofernes]

Hydra is too slow

You will be rate limited or IP banned if they set up SSH security correctly. If you want more speed, you need to pay for bots/cloud-computers/make your own SSH bruteforce network to speed it up. If it's just your personal laptop doing the brute forcing then be prepared to be dead before it finishes.

[blindcat]

Brute force is not an effective way of hacking a server, for many reasons:

1. It's slow
2. The server can be using something like fail2ban, which will slow you down even more
3. Some firewalls can also rate limit or ban your connections
4. Any reasonable sysadmin uses pubickey authentication. Or, even better, publickey+password. In both cases, you can do nothing

Better find any security vulnerability, either on the SSH server (some versions of OpenSSH are vulnerable) or some other server application.

[Laxir]

You can use crowbar brute forcing tool

[BrothaMike]

Hmm this might be a challange I'll take :)