Hydra (software)

THC Hydra

Developer(s)	THC
Stable release	9.4 / September 8, 2022; 2 years ago (2022-09-08)[1]
Repository	github.com/vanhauser-thc/thc-hydra
Written in	C
Operating system	Cross-platform
Platform	Unix
Type	Password cracking
License	GNU General Public License (version 3 or later)
Website	www.thc.org

Hydra (or THC Hydra) is a parallelized network login cracker built into various operating systems like Kali Linux, Parrot and other major penetration testing environments.[2] It was created as a proof of concept tool, for security researchers to demonstrate how easy it can be to crack logins. Hydra works by using different approaches, such as brute-force attacks and dictionary attacks, in order to guess the right username and password combination. Hydra is commonly used by penetration testers together with a set of programmes like crunch,[3] cupp[4] etc, which are used to generate wordlists based on user-defined patterns.

Functionality

Hydra can launch attacks on multiple targets at once using threads, called hydra heads. The tool keeps track of the threads using another structure, the hydra brain. Each target is attacked using a module that corresponds to a protocol(eg. if the target is an SSH server, the SSH module is used).

Supported protocols

Hydra supports many common login protocols like forms on websites, FTP, SMB, POP3, IMAP, MySQL, VNC, SSH, HTTP(S) and others.[5]

References

1. "Releases · vanhauser-thc/thc-hydra". github.com. Retrieved 2023-03-07.
2. McNab, Chris (November 2011). Network Security Assessment: Know Your Network. O'Reilly Media, Inc. p. 181. ISBN 978-0-596-51933-9.
3. "Crunch | Kali Linux Tools".
4. "CUPP - Common User Passwords Profiler". GitHub. Retrieved 2021-02-04.
5. "Debian -- Details of package hydra in buster". packages.debian.org. Retrieved 2020-05-26.

External links

• Official website