Hydra (or THC Hydra) is a parallelized network login cracker built into various operating systems like Kali Linux, Parrot and other major penetration testing environments. It was created as a proof of concept tool, for security researchers to demonstrate how easy it can be to crack logins. Hydra works by using different approaches, such as brute-force attacks and dictionary attacks, in order to guess the right username and password combination. Hydra is commonly used by penetration testers together with a set of programmes like crunch, cupp etc, which are used to generate wordlists based on user-defined patterns.
Functionality
Hydra can launch attacks on multiple targets at once using threads, called hydra heads. The tool keeps track of the threads using another structure, the hydra brain. Each target is attacked using a module that corresponds to a protocol(eg. if the target is an SSH server, the SSH module is used).
Supported protocols
Hydra supports many common login protocols like forms on websites, FTP, SMB, POP3, IMAP, MySQL, VNC, SSH, HTTP(S) and others.4
External links
References
McNab, Chris (November 2011). Network Security Assessment: Know Your Network. O'Reilly Media, Inc. p. 181. ISBN 978-0-596-51933-9. 978-0-596-51933-9 ↩
"Crunch | Kali Linux Tools". https://tools.kali.org/password-attacks/crunch ↩
"CUPP - Common User Passwords Profiler". GitHub. Retrieved 2021-02-04. https://github.com/Mebus/cupp ↩
"Debian -- Details of package hydra in buster". packages.debian.org. Retrieved 2020-05-26. https://packages.debian.org/stable/main/hydra ↩