Sunday, March 28, 2010

Cracking FTP with thc-hydra

Download hydra from http://freeworld.thc.org/thc-hydra/

After downloading hydra move it to C: drive and rename it to hydra

Then you have to download a dictionary file to make a dictionary attack(a dictionary file consists of hundreds commonly used passwords,not only commonly used passwords but many names and numbers)

Find a dictionary text file on google

Place the dictionary file in hydra folder nad rename it to dic.txt

Then to crack FTP we have to find the ip address of the target

To find the ip address of any website go to cmd prompt and type

ping www.site.com

Then you can obtain the ip address of the target site.

Now go to start menu cmd prompt and navigate to hydra folder in c:

cd\
cd hydra
cd:\hydra>

Now to start the attack we use the following command

hydra -l user -P dic.txt -e nS -vV xxx.xxx.xxx.xxx ftp

Where xxx.xxx.xxx.xxx is ip address of the target

Now hydra starts attempting login with username user(as specified in the command line) and each an every word in the dic.txt

When the cracking process is finished you can see the password


Important:For educational purposes only

No comments:

Post a Comment